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FOREWORD 

These six lectures by Mr. William F. Friedman, dean of American cryptologists, were pre- 
pared under an NSA contract in order to have the history of cryptology recorded by one who, 
perhaps more than any other in our coimtry, has played a vital role in this field. It is hoped 
that both new and old employees may be inspired with a feeling of belonging to an ancient 
profession — one that abounds in drama and fascination, and one that has had a profound im- 
pact on the turn of events in history. The lectures are published here for the first time in 
one volume. 



Shelby L. Patterson 
Chief, OflSce of Training Services 
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Lecture I 



The objective of this series of lectures is to create an awareness of the background, develop- 
ment, and manner of emplo 3 rment of a science that is the basis of a vital military offensive and 
defensive weapon known as CRYPTOLOGY, a word that comes from the Greek kryptos, meaning 
secret or hidden, plus logos, meaning knowledge or learning. Cryptology will be specifically de- 
fined a little later; at the moment, however, I’m sure you know that it has to do with secret 
communications. 



Let me say at the outset of these lectures that I may from time to time touch upon matters 
which are perhaps essentially peripheral or even irrelevant to the main issues, and if a defense 
is needed for such occasional browsing along the byways of the subject, it will be that long 
preoccupation with any field of knowledge begets a curiosity the satisfaction of which is what 
distinguishes the dedicated professional from the person who merely works just to gain a live- 
lihood in whatever field he happens to find himself a job. That’s not much fun, I’m afraid. 
By the way, a British writer, James Agate, defines a professional as the man who can do his 
job even when he doesn’t feel like doing it; an amateur, as a man who can’t do his job even 
when he does feel like doing it. 'This is pretty tough on the gifted amateur and I for one 
won’t go all the way with Agate’s definition. There are plenty of instances where gifted 
amateurs have done and discovered things to the chagrin and red-fiicedness of the professionals. 



Coming back now to the mam thoroughfare after the foregoing brief jaunt along a byway, I 
may well begin by telling you that the science of cryptology has not alwajrs been regarded as 
a vital military offensive and defensive weapon, or even as a weapon in the first place. Here 
I am reminded of a story in a very old book on cryptography. The story is probably apocry- 
phal, but it’s a bit amusing, and I give it for what it’s worth. 

It seems that about two thousand years ago there lived a Persian queen named Semiramis, 
who took an active interest in crsrptology. She was in some respects an extraordinarily un- 
pleasant woman, and we learn without surprise that she met with an untimely death. She 
left behind her instructions that her earthly remains were to be placed in a golden sarcophagus 
within an imx>osing mausoleum, on the outside of which, on its front stone wall, there was to 
be graven a message, saying: 



Stay, weary traveller! 

If thou art footsore, hungry, or in need of money — 

Unlock the riddle of the cipher graven below. 

And thou wilt be led to riches beyond aU dreams of avarice! 



Below this curious inscription was a crsqitogram, a jinnble of letters without meaning or 
even pronounceability. For several hundred years the possibility of sudden weedth served as 
a lure to many experts who tried very hard to decipher the cryptogram. They were aU with- 
out success, until one day there appeared on the scene a long-haired, bewhiskered, and bespec- 
tacled savant who, after working at the project for a considerable length of time, solved the 
cipher, which gave him detailed instructions for finding a secret entry into the tomb. When 
he got inside, he foimd an instruction to open the sarcophagus, but he had to solve several 
more cryptograms the last one of which may have involved finding the correct combination to 
a 5-tmnbler combination lock — who knows? Well, he solved that one too, after a lot of work, 
and this enabled him to open the sarcophagus, inside which he found a box. In the box was 
a message, this time in plain language, and this is what it said: 
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O, thou vile and insatiable monster! To disturb these poor bones! 
If thou hadst learned something more useful than the art of 
deciphering, 

Thou wotddst not be footsore, hungry, or in need of money! 



I’m frank to confess that many times during my 40-year preoccupation with cryptology, 
and generally near the middle and the end of each month, I felt that good old Queen Semiramis 
knew what she was talking about. However, earning money is only a part of the recompense 
for working in the cryptologic field, and I hope that most of you will find out sooner or later 
what some of these other recompenses are, and what they can mean to you. 

If Queen Semiramis thought there are other things to learn that are more useful than the 
art of deciphering, I suppose we’d have to agree, but we are warranted in saying, at least, 
that there isn’t any question about the importance of the role that cryptology plays in mo- 
dern times: all of us are influenced and affected by it, as I hope to show you in a few minutes. 

I shall begin by reading from a source which you’ll all recognize — Time, the issue of 17 
December 1945, I will preface the reading by reminding you that by that date World War 
II was all over — or at least V-E and V-J days had been celebrated some months before. Some 
of you may be old enough to remember very clearly the loud clamor on the part of certain 
vociferous members of Congress, who had for years been insisting upon learning the reasons 
why we had been caught by surprise in such a disastrous defeat as the Japanese had inflicted 
upon us at Pearl Harbor. This clamor had to be met, for these Congressmen contended that 
the truth could no longer be hushed up or held back because of an alleged continuing need 
for military secrecy, as claimed by the Ad m inistration and by many Democratic senators and 
representatives. The war was over — wasn’t it? — Republican senators and representatives 
insisted. There had been investigations — a half dozen of them — but all except one were Top 
Secret. The Republicans wanted — and at last they got what they desired — a grand finale 
Joint Congressional Investigation which would aU be completely open to the public. No 
more secrets! It was spectacular. Not only did the Congressional Inquiry bring into the 
open every detail and exhibit uncovered by its own lengthy hearings, but it also disclosed to 
America and to the whole world everything that had been said and shown at all the previous 
Army and Navy investigations. Most of the information that was thus disclosed had been, 
and much of it still, was Top Secret; yet all of these precious secrets became matters of public 
information as a result of the Congressional Investigation. 

There came a day in the Congressional Hearings when the Chief of Staff of the United States 
Army at the time of the Pearl Harbor Attack, 5-star General George C. Marshall, was called 
to the witness stand. He testified for several long, long days, eight of them in aU. Toward 
the end of the second day of his ordeal he was questioned about a letter it had been rumored 
he’d written to Governor Dewey in the Autumn of 1944, during the Presidential Campaign. 
The letter was about codes. With frozen face. General Marshall balked at disclosing the 
whole letter. He pleaded most earnestly with the Committee not to force him to disclose 
certain of its contents, but to no avail. He had to bow to the will of the majority of the Com- 
mittee. I dhall now read from Time a bit of information which may be new to many of my 
listeners, especially to those who were too young in December 1945 to be delving into periodical 
literature or to be reading any pages of the daily newspaper other than those on which the 
comics appear. 

Said Time, and I quote: 

“ ‘U.S. citizens discovered last week that perhaps their most potent secret weapon of World 
War II was not radar, not the VT fuse, not the atom bomb, but a harmless little machine which 
cryptographers had painstakingly constructed in a hidden room in Washington. With this 
machine, built after years of trial and error, of inference and deduction, cryptographers had 
duplicated the decoding devices used in Tokyo. Testimony before the Pearl Harbor Committee 
had already shown that the machine, known as ‘Magic’, was in use long before December 7, 1941, 
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and had given ample warning of the Jap’s sneak attack, if only U.S. brass hats had been smart 
enough to realize it. Now, General Marshall continued the story of ‘Magic’s’ magic: 

1. ‘It had enabled a relatively small U.S. Force to intercept a Jap invasion fleet, win a de- 
cisive victory in the Battle of the Coral Sea, thus saving Australia and New Zealand. 

2. ‘It had directed U.S. submarines unerringly to the sea lanes where Japanese convoys would 
be passing. 

3. ‘It had given the U.S. full advance information on the size of the Jap forces advancing on 
Midway, enabled our Navy to concentrate ships which otherwise might have been 3,000 miles 
away, thus set up an ambush which proved to he the turning-point victory of the Pacific war. 

4. ‘By decoding messages from Japan’s Ambassador Oshima in Berlin, often reporting inter- 
views with Hitler, it had given our forces invaluable information on German war plans.’ ” 

Time goes on to give more details of that story, to which I may later return but I can’t leave 
this citation of what cryptology did toward our winning of World War II without teUing you 
that the account given by Time of the achievements of Magic makes it appear that all the 
secret intelligence gained from our reading Japanese messages was obtained by using that 
“harmless little machine” which Time said was used in Tokyo by the Japanese Foreign Office. 
I must correct that error by explaining &st that Magic was not the name of the machine but 
a term used to describe the intelligence material to which the machine, among other sources, 
contributes and then by teUing you that the secret information we obtained that way had 
little to do with those portions of the Magic material which enabled our Navy to win such 
spectacular battles as those of the Coral Sea and Midway, and to waylay Japanese convoys. 
The naval parts of Magic were nearly aU obtained from Japanese naval messages by our own 
very ingenious U.S. Navy cryptanalysts. At that time, I may teU those of you who are new, 
the Army and Navy had separate but cooperating cryptologic agencies and activities; the 
United States Air Force was not yet in existence as an autonomous and separate component 
of the Armed Forces, and work on Japanese, German, and Italian Air Force co mmuni cations 
was done by Army cryptanalysts, admirably assisted by personnel of what was then known as 
the Army Air Corps. 

It is hardly necessary to teU you how carefuUy the Magic of World War II was guarded be- 
fore, during, and after the war until the Congressional Inquiry brought most of it out in the 
open. Some remaining parts of it are stiU very carefully guarded. Even the fact of the ex- 
istence of Mqgic was known to only a very few persons at the time of Pearl Harbor — and 
that is an important element in any attempt to explain why we were caught by surprise by 
the Japanese at Pearl Harbor in a devastating attack that crippled oiur Navy for many months. 
Let me read a bit from page 261 of the Report of the Majority of the Joint Congressional 
Investigation of the attack: 

“The Magic intelligence was pre-eminently important and the necessity for keeping it confi- 
dential cannot be overestimated. However, so closely held and top secret was this intelligence 
that it appears that the fact that the Japanese codes had been broken was regarded as of more 
importance than the information obtained from decoded traffic.” 

Time says, in connection with this phase of the story of Magic during World War II: 

“So priceless a possession was Magic that the U.S. high command lived in constant fear that 
the Japs would discover the secret, change their code machinery, force U.S. cryptographers to 
start all over again.” 

Now I don’t want to overemphasize the importance of communication intelligence in 
World War II, but I think it warranted to read a bit more of what is said about its importance 
in the Report of the Majority. The following is from p. 232: 

”... all witnesses familiar with Magic material throughout the war have testified that it con- 
tributed enormously to the defeat of the enemy, greatly shortened the war, and saved many 
thousands of Uves.” 

General Chamberlin, who was General MacArthur’s operations officer, or G-3, throughout 
the war in the Pacific, has written: “The information G-2, that is, the intelligence staff, gave 
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me in lihe Pacific Theater alone saved us many thousands of lives and shortened the war by 
no less than two years.” We can’t put a dollars-and-cents value on what our possession of 
COMINT meant in the way of saving lives; but we can make a dollars-and-cents estimate of 
what communications intelligence meant by shortening the war by two years, and the result 
of that estimate is that it appears that $1.00 spent for that sort of intelligence was worth $1,000 
spent for other military activities and materials. 

In ^ort, when our commanders had that kind of intelligence in World War II they were 
able to put what small forces they had at the ri^t place, at the right time. But when they 
didn’t have it — and this happened, too — their forces often took a beating. Later on we’U 
note instances of each type. 

I hope I’ve not tried your patience by such a lengthy preface to the real substance of this 
series of lectmres; let’s get dovm to brass tacks. For those of you who come to the subject of 
cryptology for the first time, a few definitions wiU be useful, in order that what I shall be talk- 
ing about may be understood without question. Agreement on basic terminology is always 
desirable in tackling any new subject. In giving you the definitions there may be a bit of 
repetition because we shall be looking at the same terms from somewhat different angles. 

First, then, what is cryptology? Briefiy, we may define it as the doctrine, theory, or branch 
of knowledge which treats of hidden, disguised, or secret communications. You won’t find 
the word in a small dictionary. Even Webster’s Unabridged defines it merely as “secret or 
enigmatical language”; and in its “Addenda Section,” which presumably contains new or 
recently coined words, it is defined merely as “the study of cryptography.” Neither of these 
definitions is broad or specific enough for those who are going to delve somewhat deeply into 
this science. 

Cryptology has two main branches: the first is cryptography, or, very briefly, the science of 
preparing secret commimications; and the second is cryptanalysis, or the science of solving 
secret commimications. Let’s take up cryptography first, because as a procedure it logically 
precedes cryptanalysis: before solving anything there must be something to solve. 
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Cryptography is that branch of cryptology which deals with the various means, methods, 
devices, and machines for converting messages in ordinary, or what we call plain language, 
into secret language, or what we caU <ayptograms. Here’s a picture of one of the most fa- 
mous cryptograms in history. It was the solution of this cryptogram which resulted in bring- 
ing America into World War I on the side of the Allies on 6 April 1917, just about six weeks 
after it was solved. I’ll tell you about it later in this series. 

Crsrptography also includes the business of reconverting the cryptograms into their original 
plain-language form, by a direct reversal of the steps followed in the original transformation. 
This implies that the persons involved in both of these bits of business, those at the encipher- 
ing and sending end, and those at the receiving and deciphering end, have an understanding 
as to what procedures, devices, and so on, will be used and exactly how — down to the very 
last detail. The what and the how of the business constitutes what is generally referred to as 
the key. The key may consist of a set of rules, alphabets, procedures, and so on; it may also 
consist of an ordinary book which is used as a source of keys; or it may be a specialized book, 
called a code book. T^t cryptogram I just showed you was made by using a book — & German 
codebook. 

To encrypt, is to convert or transform a plaintext message into a cryptogreim by following 
certain rules, steps, or processes constituting the key or keys and agreed upon in advance by 
the correspondents, or furnished them by higher authority. 

To decrypt is to reconvert or to transform a cryptogram into the original equivalent plain- 
text message by a direct reversal of the encrypting process that is, by applying to the crypto- 
gram the key or keys, usually in a reverse order, employed in producing it. 

A person who encrypts and decrypts messages by having in his possession the necessary 
keys, is called a cryptographer, or a cryptographic clerk. 

Encrypting and decrypting are accomplished by means collectively designated as codes and 
ciphers. Such means are used for either or both of two purposes: (1) secrecy, and (2) economy. 
Secrecy usually is far more important in diplomatic and military cryptography than economy, 
but it is possible to combine secrecy and economy in a single system. Persons technically un- 
acquainted with cryptology often talk about “cipher codes,” a term which I suppose came into 
use to differentiate the term “code” as used in cryptology from the same term as used in other 
connotations, as, for example, the Napoleonic Code, a traffic code, a building code, a code of 
ethics, and so on. Now, in cryptology, there is no such thing as a “cipher code.” There are 
codes and there are ciphers, and we might as well learn right off the differences between them, 
so that we get them straightened out in our minds before proceeding further. 

In ciphers, or in cipher systems, cryptograms are produced by applying the cryptographic 
treatment to individual letters of the plaintext messages, whereas, in codes, or in code systems, 
cryptograms are produced by applying the cryptographic treatment generally to entire words, 
phrases, and sentences of the plaintext messages. More specialized meanings of the terms will 
be explained in detail later, but in a moment I’ll show you an example of a cryptogram in 
cipher and one in code. 

A cryptogram produced by means of a cipher system is said to be in cipher and is called a 
cipher message, or sometimes, simply a cipher. The act or operation of encrsrpting a cipher 
message is called enciphering, and the enciph^d version of the plain text, as well as the act 
or process itself, is often refeired to as the encipherment. A cryptographic clerk who performs 
the process serves as an encipherer. The corresponding terms applicable to decrypting cipher 
messages are deciphering, decipherment, decipherer. 

A cryptogram produced by means of a code system is said to be in code, and is called a code 
message. The text of the cryptogram is referred to as code text. This act or operation of en- 
crjpting is called encoding, and the encoded version of the plain text, as well as the act or 
process itself, is referred to as the encodement. The derk who performs the process serves as 
an encoder. The corresponding terms applicable to the decrypting of code messages are decod- 
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Figure 2. 



Nobody will quarrel with you very hard if you wish to say that a code system is nothing 
but a specialized form of substitution; but it’s best to use the word “code” when a code book 
is involved, and to use “substitution cipher” when a literal system of substitution is used. 

It is possible to encrypt a message by a substitution method and then to apply a transposi- 
tion method to the substitution text, or vice versa. Combined transposition-substitution 
ciphers do not form a third class of ciphers; they are only occasionally encovmtered in military 
cryptography. Applying a cipher to code groups is a very frequently used procedure and 
we’U see cases of that too. 

Now for an example of a cryptogram in code. In Fig. 3 is a plaintext message in the hand- 
writing of President Wilson to his special emissary in London, Colonel House. Contained in 
Fig. 4 is the cryptogram after the plain text was encoded by Mrs. Wilson. The President 
himself then typed out the final message on his own typewriter, for transmission by the 
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Department of State. It would appear that President Wilson lacked confidence in the 
security of the Department of State’s methods — and maybe with good reason, as may be seen 
in the following extract from a letter dated 14 September 1914 from the President to Ambas- 
sador Page in London: “We have for some time been trying to trace the leaks, for they have 
occurred frequently, and we are now convinced that our code is in possession of persons at 
intermediary points. We are going to take thoroughgoing measures.” Perhaps one of the 
measures was that the President got himself a code of his own. 1 must foUow this up some 
day. 
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Figure 3. Figure 4. 

A cipher device is a relatively simple mechanical contrivance for encipherment and decipher- 
ment, usually hand-operated or manipulated by the fingers, as, for example, a device with con- 
centric rings of alphabets, manually powered. In Fig. 5 is an example — a cipher device with 
such rings. I’ll teU you about it later. A cipher machine is a relatively complex apparatus 
or mechanism for encipherment and decipherment, usually equipped with a typewriter key- 
board and generally requiring an external power source. Modem cryptology, following the 
trend in mechanization and automation in other fields, now deals largely with cipher machines, 
some highly complicated. Fig. 6 shows an example of a modern cipher machine with key- 
board and printing mechanism. 

One of the expressions whid lC^iforia ed^laymen use, but which you must never use, is "the 
German code,” or "the Japanese code,” or "the Navy cipher,” and the like. When you hear 
this sort of expression you may put the speaker down at once as a novice. There are literally 
hundreds of different codes and ciphers in simultaneous use by every large and important 
government or service, each suited to a special purpose; or where there is a multiplicity of sys- 
tems of the same general nature, the object is to prevent a great deal of traffic being encrypted 
in the same key, thus overloading the system and making it vulnerable to attack by methods 
and procedures to be mentioned in broad terms in a few moments. 
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Figure 5. 




Figure 6.— TSEC/KL-7 Cipher Machine (U.S.). 
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The need for secrecy in the conduct of important affairs has been recognized from time im- 
memorial. In the case of diplomacy and organized warfare this need is especially important 
in regard to commxmications. However, when such commimications are transmitted by elec- 
trical means, they can be heard or, as we say, intercepted, and copied by unauthorized persons, 
usually referred to collectively as Ihe enemy. The protection resulting from all measures de- 
signed to deny to the enemy information of value which may be derived from the interception 
and study of such communications is called a>mmunication security, or, for short, COMSEC. 

In theory, any cryptosystem except one, to be discussed in due time, can be attacked and 
“broken,” i.e., solved, if enough time, labor, and skill are devoted to it, and if the volume of 
traffic in that system is large enough. This can be done even if the general system and the 
specific key are xmknown at the start. You will remember that I prefaced my statement any 
cryptosystem can be solved by saying “in theory” because in military operations theoretical 
rules usually give way to practical considerations. 

That branch of cryptology which deals with the principles, methods, and means employed 
in the solution or analysis of cryptosystems is called cryptanalytics. The steps and operations 
performed in applying the principles of cryptanalytics constitute cryptanalysis. To crypta- 
nalyze a cryptogram is to solve it by cryptanalysis. A person skilled in the art of crj^tanalysis 
is called a cryptanalyst, and a clerk who assists in such work is called a cryptancdytic clerk. 

Information derived from the organized interception, study, and analysis of the enemy’s 
conummications is called communication intelligence, or, for ^ort, COMINT. Let us take care- 
ful note that COMINT and COMSEC deal with communications. Although no phenomenon is 
more familiar to us than that of communication, the fact of the matter is that this magic word 
means many things to many people. A definition of communication that is broad enough 
for omr purposes would be that communication deals with intelligent messages exchanged be- 
tween intelligent beings. This implies that human beings and human operators are involved 
in the preparation, encryption, transmission, reception, decryption, and recording of messages 
which at some stage or stages are in written form and in some stage or stages are in electrical 
form as signals of one sort or another. But in recent years there have come into prominence 
and importance electrical signals which are not of the sort I’ve just indicated. They do not 
carry “messages” in the usual sense of the word; they do not convey &om one human being 
to another an intelligible sequence of words and an intelligible sense. I refer here to electrical 
or electronic signals such as are employed in homing or directional beacons, in radar, in tele- 
metering or recording data of an electrical or electronic nature at a distance, and so on. In- 
formation obtained &om a study of enemy electronic emissions of these sorts is called electronic 
intelligence, or, for short, ELINT. COMINT and ELINT comprise SIGINT, that is, signal intelli- 
gence. Cryptology is the science which is concerned with all these branches of secret sig nalling . 

In this series of lectures we shall be concerned only with COMSEC and COMINT, leaving for 
others and for other times the subject of ELINT. This means that we shall deal with commun- 
ications or messages. 

Communication may be conducted by any means susceptible of ultimate interpretation by 
one of the five senses, but those most commonly used are seeing and hearing. Aside from the 
use of simple visual and auditory signals for communication over relatively short distances, 
the usual method of communication between or among individuals separted from another by 
relatively long distances involves, at one stage or another, the act of writing or of speaking 
over a telephone. 

Privacy or secrecy in commwiication by telephone can be obtained by using equipment 
which affects the electrical currents involved in telephony, so that the conversations can be 
understood only by persons provided with suitable equipment properly arranged for the pur- 
pose. The same thing is true in the case of facsimile transmission (i.e., the electrical trans- 
mission of ordinary writing, pictures, drawings, maps). Even today there are already simple 
forms of enciphered television transmissions. Enciphered fisicsimile is called cifax; enciphered 
telephony, ciphony; and enciphered television, civision. However, these lectures vdll not 
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deal with these electrically and cryptanalyticaUy more complex forms of cryptology. We 
dial! stick to enciphered or encrypted writing — ^which will be hard enough for most of us. 

Writing may be either visible or invisible. In the former, the characters are inscribed with 
ordinary writing materials and can be seen with the naked eye; in the latter, the characters are 
inscribed by means or methods which make the writing invisible to the naked eye. Invisible 
writing can be prepared with certain chemic als called sympathetic or secret inks, and in order 
to “develop” such writing, that is, make it visible, special processes must usually be applied. 
Shown in Fig. 7 is an interesting example — the developed secret-ink message that figured 
in an $80,000,000 suit won by two American firms against the German Government after 
World War I sabotage was proved. There are also mel^ods of producing writing which is in- 
visible to the naked eye because the characters are of microscopic size, thus requiring special 
microscopic and photographic apparatus to enlarge such writing enough to make it visible to 
the naked eye. Here’s an example — a code message in a space not much larger than the head 
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of a pin. A simple definition of secret writing would be to say that it comprises invisible writing 
and unintdligible visible writing. 

There is one additional piece of basic information which it is wise to call to your attention 
before we proceed much further, and I’U begin by stating that the greatest and the most power- 
ful instrument or weapon ever forged and improved by man in his long struggle for emancipa- 
tion firom utter dependence upon his own environment is the weapon of literacy — a mastery of 
reading and writing; and the most important invention, the one that made the weapon of lit- 
eracy practical, was the invention of the alphabet. It is therefore a rather striking anomaly 
that we should now come to the study of another weapon — a counter-weapon to the weapon of 
literacy — the weapon of secrecy, the basic intent of which is to thwart the weapon that man 
struggled so long to forge. Secrecy is applied to make writing more difficult and the reading of 
the writing very difficult, if not impossible. 

Perhaps this is a good place to do a bit of theorizing about this matter of secrecy and what 
it implies. 

Every person who enciphers a piece of writing, a message, or a text of any kind, for the pur- 
pose of hiding something or keeping something secret, does so with the idea that some other 
person, removed from him in distance, or time, or both, is intended to decipher the writing or 
message and thus uncover the secret which was so hidden. A person may possess a certain 
piece of knowledge which he does not wish to forget, but which he is nevertheless unwilling to 
commit to open writing, and therefore he may jot it down in cryptic form for himself to de- 
cipher later, when or if the information is needed. The most widely known example of such a 
cryptogram is found in Edgar Allan Poe’s romantic tale The Gold Bug. That sort of usage of 
cryptography, however, is unusual. There are also examples of the use of cipher writing to 
establish priority of discovery, as did the astronomers Galileo and Huygens. I suppose I 
should at least mention another sort of cryptic writing famous in literary history, the diaries 
of persons such as Samuel Pepys and William B 3 o:d. These are commonly regarded as being 
“in cipher,” but they were actually written in a more-or-less private shorthand and can easily 
be read without the help of cryptanalysis. In Fig. 9 is shown a page of Pepys’ diary. 

Now there can be no logical reason, point, or purpose in taking the time and trouble to en- 
cipher anything unless it is expected that some other person is to decipher the cipher some 
time in the future. This means that there must exist some very direct, clear-cut and unam- 
biguous relationship between the enciphering and deciphering operations. Just what such a 
relationship involves wiU be dealt with later, but at this moment aU that it is necessary to say 
is that in enciphering there must be rules that govern or control the operations, that these 
rules must admit of no uncertainty or ambiguity, and that they must be susceptible of being 
applied with undeviating precision, since otherwise it wiU be difficult or perhaps impossible for 
the decipherer to obtain the correct answer when he reverses the processes or steps followed in 
the encipherment. 'This may be a good place to point out that a valid or authentic cryptana- 
lytic solution cannot be considered as being merely what the cryptanalyst thinks or says he 
thinks the cryptogram means, nor does the solution represent an opinion of the cryptanalyst. 
Solutions are valid only insofar as they are objective and susceptible of demonstration or proof 
employing scientifically acceptable methods or procedures. It should hardly be necessary to 
indicate that the validity of the results achieved by cryptanalytic studies of authentic crypto- 
grams rests upon the same sme and well established scientific foundations, and is reached by the 
same sort of logic as are the discoveries, results, or “answers” achieved by any other scientific 
studies, namely: observation, hypothesis, deduction, induction, and confirmatory experiment. 
Implied in what I have just said is the tacitly understood and now rarely explicitly stated as- 
sumption that two or more, equally competent and, if necessary, specially qualified investi- 
gators, each working independently upon the same material, wiU achieve identical or practicaUy 
identical results. 

Cryptology is usuaUy and properly considered to be a branch of mathematics, although 
Francis Bacon considered it also a branch of grammar and what we now caU linguistics. Matii- 
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ematical and statistical considerations play an ever-increasing and prominent role in practical 
cryptology, but don’t let my statement of this point frighten those of you who have not had 
much formal instruction in these subjects. We have excellent cryptologists who have never 
studied more than arithmetic, and some of our best ones would hide if you were to go searching 
for mathematicians around here. What is needed is the ability to reason logically, as the 
mathematician sometimes does, and this ability is found in the most curious sorts of persons 
and places. So those of you who are frightened by the words mathematics and statistics take 
heart — you’re not nearly so badly off as you may fear. 

But now to return to the main theme, the place mathematics occupies in cryptology, let me 
say that just as the solution of mathematical problems leaves no room for the exercise of divi- 
nation or other mysterious mental or psychic powers, so a valid solution to a cryptogram must 
leave no room for the exercise of such powers. In cryptologic science there is one and only 
one valid solution to a cryptogram, just as there is but one correct solution or “solution set’’ 
to any problem in mathematics. But perhaps I’ve already dwelt on this point too long; in any 
case, we’ll come back to it later, when we come to look at certain types of what we may call 
pseudo-ciphers. 

In the next lecture I’m going to give you a brief glimpse into the background or history of 
cryptology, which makes a long and interesting story that has never been told accurately and 
in detail. The history of communication security, that is, of cryptography, and the history 
of communication intelligence, that is, of cryptanalysis, which are but opposite faces of the 
same coin, deserve detailed treatment, but I am dubious that this sort of history will ever be 
written because of the curtain of secrecy and silence which officially surroimds the whole field 
of cryptology. Authentic information on the background and development of these vital mat- 
ters having to do with the security of a nation is understandably quite sparse. 

But in the succeeding lectures I’ll try my best to give you authentic information, and where 
there’s conjecture or doubt I’ll so indicate. I must add, however, that in this series I’m going 
to have to omit many highly interesting episodes and bits of information, not only because 
these lectures are of low classification, but also because we won’t and can’t for security con- 
siderations, go beyond a certain period in cryptologic history. Nevertheless, I hope that you 
won’t be disappointed and that you’U learn certain things of great interest and importance, 
things to remember if you wish to make cryptology your vocation in life. 



CONFIDENTIAL 



14 



REF ID:A63860 



CONFIDENTIAL 



Lecture II 



As 1 said at the close of the preceding lecture, a bit of history is always useful in introducing 
a subject belonging to a special and not too well known field; therefore, I’ll proceed with some 
historical information about crj^tology, which, as you learned before, comprises two closely 
related sciences, namely, cryptography and cr 3 rptanalysis. I will repeat and emphasize that 
they are but opposite faces of the same valuable coin; progress in one inevitably leads to pro- 
gress in the other, and to be efficient in cr 3 nptology you must know something about each of 
them. 

Cryptography and cryptanalysis probably go back to the dawn of the invention and develop- 
ment of the art of writing itself. In fact, there is reason for speculating as to which came first — 
the invention of writing or the invention of cryptography; it’s somewhat like the question as to 
which came first — the hen or the egg. It is possible that some phases of cryptography came 
before the art of writing had advanced very far. 

I’ve mentioned the art of writing. As in the case of other seemingly simple questions, such 
as, “why is grass green?,” when we are asked to define writing we can’t find a very simple 
answer, just because the answer isn’t at all simple. Yet, Breasted, the famous University of 
Chicago historian and Orientalist, once said: “The invention of writing and of a convenient 
system of records on paper has had a greater infiuence in uplifting the human race than any 
other intellectual achievement in the career of man.” There has been, in my humble opinion, 
no greater invention in all history. The invention of writing formed the real beginning of 
civilization. As language distinguishes man from other animals, so writing distinguishes civ- 
ilized man from barbarian. To put the matter briefiy, writing exists only in a civilization and 
a civilization cannot exist without writing. Let me remind you that animals and insects do 
communicate — there’s no question about that; but writing is a thing peculiar to and found only 
as a phenomenon in which man and no animal or insect engages, and let’s never forget this 
fact. Mankind lived and functioned for an enormous number of centuries before writing was 
discovered and there is no doubt that writing was preceded by articulate speech for eons — but 
civilization began only when men got the idea of and invented the art of writing. So far as 
concerns Western or Occidental civilization, writing is, in essence, a means of representing the 
sounds of what we call speech or spoken language. Other systems of writing were and some 
stiU are handicapped by trying to represent things and ideas by pictures. I’m being a bit sol- 
emn about this great invention because I want to impress upon you what our studies in cryp- 
tology are reaUy intended to do, namely, to defeat the basic or intended purpose of that great 
invention: instead of recording things and ideas for the dissemination of knowledge, we want 
and strive our utmost to pervent this aim from being realized, except among our awn brethren 
and under certain special circumstances, for the purpose of our mutual security, our self-preser- 
vation. And that’s important. 

Writing is a comparatively new thing in the history of mankind. No complete system of 
writing was used before about 3500 B.C. 

Ordinary writing, the sort of writing you and I use, is perhaps an outgrowth or development 
of picture writing or rebus writing, which I’m sure most of you enjoyed as children. A rebus 
contains features of both ordinary and cr 3 rptographic writing; you have to “decrypt” the sig- 
nificance of some of the symbols, combine single letters with syllables, pronounce the word that 
is represented by pictures, and so on. Fig. 10 is an example which I have through the courtesy 
of the Bell Telephone Laboratories. See how much of it you can make out in half a minute. 
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Figure 10. 

From rebus writing there came in due comse alphabetic writing and let me say right now that 
the invention of the alphabet, which apparently happened only once in the history of mankind, 
in some Middle East Semitic region, in or near the Palestine-Syria area, then spread through- 
out the whole of the European continent, and finally throughout most of the world, is Western 
man’s greatest, most important, and most far-reaching invention because it forms the founda- 
tion of practically all our written and printed knowledge, except that in Chinese. The great 
achievement of the invention of the alphabet was certainly not the creation of the signs or 
symbols. It involved two brilliant ideas. The first was the idea of representing merely the 
sounds of speech by symbols, that is, the idea of what we may call phoneticization; the second 
was the idea of adopting a system in which, roughly speaking, each speech sound is denoted or 
represented by one and only one symbol. Simple as these two ideas seem to us now, the in- 
vention was apparently made, as I’ve said, only once and the inventor or inventors of the 
alphabet deserve to be ranked among the greatest benefactors of mankind. It made possible 
the recording of the memory of mankind in our libraries, and from that single invention have 
come all past and present alphabets. Some of the greatest of men’s achievements we are now 
apt to take for granted; we seldom give them any thought. The invention of the art of writing 
and the invention of the alphabet are two such achievements and they are worth pondering 
upon. Where would we be without them? Note that among living languages Chinese pre- 
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sents special problems not only for the cryptologist but also for the Chinese themselves. No 
Sinologist knows aU the 80,000 or so Chinese s 3 nnbols, and it is also far from easy to master 
mbrely the 9,000 or so symbols actually employed by Chinese scholars. How far more simple 
it is to use only 20 to 26 symbols! Being a monosyllabic language, it seems almost hopeless to 
try to write Chinese by the sort of mechanism i^ed in an alphabetic polysyllabic language; 
attempts along these lines have been unsuccessful and the difficulties in memorizing a great 
many Chinese characters accoimt for the fact that even now only about 10% of the Chinese 
people can read or write to any significant degree. The spread of knowledge in China is there- 
by much hampered. 

We find instances of ciphers in the Bible. In Jeremiah Chapter 25, Verse 26 occurs this 
expression: “And the King of Sheshakh shall drink after them.” Also, again in Jeremiah 51: 
41: “How is Sheshakh taken!” Well, for perhaps many years that name “Sheshakh” remained 
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Figure 11. 

a mystery, because no such place was known to geographers or historians. But then it was 
discovered that if you write the twenly-two letters of the Hebrew alphabet in two rows, eleven 
in one row and eleven in the other, as in Fig. 11, you set up a substitution alphabet whereby 
you can replace letters by those standing opposite them. For example, “shin,” is represented 
by “beth” or vice versa, so that “Sheshakh” translates “Babel,” which is the old name of 
“Babylon.” Hebrew then did not have and still doesn’t have vowels; they must be supplied. 
This is an example of what is called ATHBASH writing, that is, where Aleph, the first letter is 
replaced by Teth, the last letter; Beth, the second letter, by Shin, the next-to-the-last, etc. 
By sliding the second row of letters one letter each time there are eleven different cipher alpha- 
bets available for use. The old Talmudists went in for cryptography to a considerable extent. 
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Incidentally, in mentioning the Bible, I will add that Daniel, who, after Joseph in Genesis, was 
an early interpreter of dreams and therefore one of the first psychoanalysts, was also the first 
cryptanalyst. I say that he was an early psychoanalyst, because you will remember that he 
interpreted Nebuchadnezzar’s dreams. In the Bible’s own words, “Nebuchadnezzar dreamed 
dreams, wherewith his spirit was troubled, and sleep brake from him.’’ But, unfortunately, 
when he woke up he just couldn’t remember those troublesome dreams. One morning he 
called for his wise men, magicians, astrologers, and Chaldean sorcerers and asked them to in- 
terpret the dream he’d had during the preceding night. “Well, now, tell us the dream and 
we’U try to interpret it,” they said. To which King Nebuchadnezzar exclaimed, “The thing 
is gone from me. 1 don’t remember it. But it’s part of your job to find that out, too, and 
interpret it. And if you can’t teU me what the dream was, and interpret it, things wiU happen 
to you.” What the king asked was a pretty stiff assignment, of course, and it’s no wonder 
they failed to make good, which irked Nebuchadnezzar no end. Kings had a nasty habit of 
chopping your head off in those days if you failed or made a mistake, just as certain arbitrary 
£md cruel despots are apt to do even in modern times for more minor infractions, such as not 
following the Party Line. So in this case it comes as no surprise to learn that Nebuchadnezzar 
passed the word along to destroy all the wise men of Babylon, among whom was one of the 
wise men of Israel, named Daniel. Well, when the King’s guard came to fetch him, Daniel 
begged that he be given just a bit more time. Then, by some act of divination, — the Bible 
simply says that the secret was revealed to Daniel in a night vision — Daniel was able to recon- 
struct the dream and then to interpret it. Daniel’s reputation was made. Some years later, 
Nebuchadnezzar’s son Belshazzar was giving a feast, and, during the course of the feast, in the 
words of the Bible, “came forth fingers of a man’s hand and wrote over against the candlestick 
upon the plaster of the wall.” The hand wrote a secret message. You can imagine the spine- 
chilling scene. Belshazzar was very much upset, and just as his father did, he called for his 
wise men, soothsayers, Chaldean sorcerers, magicians and so on, but they couldn’t read the 
message. Apparently they couldn’t even read the cipher characters! Well, Belshazzar’s 
Queen fortmiately remembered what that Israelite Daniel had done years before, and she sug- 
gested that Daniel be called in as a consultant. Daniel was called in by Belshazzar, and he 
succeeded in doing two things. He succeeded not only in reading the writing on the wall: 
“MENE, MENE, TEKEL, UPHARSIN,” but also he was successful in deciphering the mean- 
ing of those strange words. His interpretation: “Mene” — “God hath numbered thy kingdom 
and finished it.” “Tekel” — “Thou are weighed in the balances and foxmd wanting.” “Up- 
harsin” — “Thy kingdom shall be divided and given to the Medes and Persians.” Apparently 
the chap who did the handwriting on the wall knew a thing or two about cryptography, because 
he used what we call “variants,” or different values, for in one case the last word in the secret 
writing on the wall is “Upharsin” and in the other it is “Peres”;* the commentators are a bit 
vague as to why there are these two versions of the word in the Bible. At any rate, Babylon 
was finished, just as the inscription prophesied; it died with Belshazzar. I think this curious 
Biblical case of the use of cryptography is interesting because I don’t think anybody has really 
found the true meaning of the sentence in secret writing, or explained why the writing on the 
wall was unintelligible to all of Belshazzar’s wise men. 

Probably the earliest reliable information on the use of cryptography in connection with an 
alphabetic language dates from about 900 B.C., Plutarch mentioning that from the time of 
Lycurgus there was in use among the Lacedemonians, or ancient Spartans, a device called the 
scytcde. This device, which I’ll explain in a moment, was definitely known to have been used 
in the time of Lysander, which would place it about 400 B.C. This is about the time that 
Aeneas Tacticus wrote his large treatise on the defense of fortification, in which there is a chap- 
ter devoted specifically to cryptography. In addition to mentioning ways of physically con- 
cealing messages, a peculiar sort of cipher disk is described. Also a method of replacing words 
and letters by dots is mentioned. 

Figure 12 is a picture of the scytale, one of the earliest cipher devices history records. The 
scytale was a wooden cylinder of specific dimensions around which they wrapped spirally a 
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piece of parchment or leather; they then wrote the message on the parchment, unwound it, and 
sent it to its destination by a safe courier, who handed it over to the commander for whom it 
was intended and who, having been provided with an identically dimensioned cylinder, would 
wind the strip of leather or parchment around his cylinder and thus bring together properly the 
letters representing the message. This diagram may not be accurate. I don’t thinlr anyone 
really understands the scheme. The writing was done across the edges of the parchment, ac- 
cording to some accounts, and not between the edges, as shown here. Incidentally, you may 
be interested to learn that the baton which the European field mars hal still carries as one of 
the insignia of his high office derives from this very instrument. 




Figure 12. 

We don’t know much about the use of cryptography by the Romans, but it is weU known 
that Caesar used an obviously simple method; all he did was to replace each letter by the one 
that was fourth from it in the alphabet. For example, A would be represented by D,B by E 
and so on. Augustus Caesar is said to have used the same sort of thing, only even more simple: 
each letter was replaced by the one that followed it in the alphabet. Cicero was one of the 
inventors of what is now called shorthand. He had a slave by the name of Tiro, who wrote 
Cicero’s records in what are called Tironian notes. Modem shorthand is a development of 
Tiro’s notation system. 

In Fig. 13 we see some cipher alphabets of olden times, alphabets used by certain historical 
figures you’ll all remember. The first cipher alphabet in this figure was employed by Charle- 
magne, who reigned from 768 to 814 A.D. The second one was used in England during the reign 
of Alfred the Great, 871 to 899. The third alphabet is called ogam writing and was used in 
ancient Ireland. The alphabets below that were used much later in England: the fourth one 
by Charles the First, in 1646; the fifth, the so-called “clock cipher,” was used by the Marquis 
of Worcester in the 17th Century; finally, the last one was used by Cardinal Wolsey in about 
1524. 
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Figure 13. 
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In the Middle Ages cryptography appears first as a method of concealing proper names, usu- 
ally by the simple substitution of each letter by the next one in the alphabet, just about as 
Augustus Caesar did hundreds of years before. At other times the vowels were replaced by 
dots, without changing the consonants — a method that was used throughout Europe to about 
1000 A.D., when letters began to be replaced by various signs, by other letters, by letters from 
another language, by runes which are found in abundance in Scandinavia, and by arbitrary 
symbols. Figure 14 is an example of a runic inscription on a stone that stands before Gripshohn 
Castle near Stockholm, Sweden. The word rune means “secret.” 

Within a couple of hundred years the outUnes of modem cryptography began to be formed by 
the secret correspondence systems employed by the small Papal States in Italy. In fact, the 
real beg i nnings of systematic, modem cryptology can be traced back to the days of the early 
years of the 13th Century, when the science began to be extensively employed by the princes 
and chanceries of the Papal States in their diplomatic relations amongst themselves and with 
other countries in Etuope. The necessity for secret communication was first met by attempts 
inspired by or derived from ancient cryptography, as I’ve outlined so far. There was a special 
predilection for vowel substitution but there appeared about this time one of the elements which 
was later to play a very prominent role in all cipher systems, an element we now call a syllabary, 
or a repertory. These were lists of letters, syllable, frequently used parts of speech and words, 
with additions of arbitrary equivalents for the names of persons and places. There is still in 
existence one such syllabary and list of arbitrary equivalents which was used about 1236 A.D., 
and there are other examples that were used in Venice in 1350. 
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Among examples of ciphers in medieval cryptography is a collection of letters of the Arch- 
bishop of Naples, written between 1363 and 1365, in which he begins merely with symbol sub- 
stitutions for the vowels and uses the letters that are actually vowels to serve as nulls or non- 
significant letters to throw the would-be-cryptanalyst off the right track. As a final develop- 
ment, the high-frequency consonants L, M, N, R, and S, and aU the vowels, are replaced not 
only by arbitrary symbols but also by other letters. 

About 1378 an experienced cryptologist named Gabriele Lavinde of Parma was employed as 
a professional by Clement VII and in the Vatican Library there is a collection of ciphers devised 
and used by Lavinde about 1379. It consists of repertories in which every letter is replaced 
by an arbitrary symbol. Some of these ciphers also have nulls and arbitrary equivalents or 
signs for the names of persons and places. There is a court cipher of Mantua, dated 1395, that 
used this system. 

At the beginning of the 15th Century the necessity of having variants for the high-frequency 
letters, especially the vowels, became obvious. Figure 15 is an alphabet of that period which 
is interesting because it shows that even in those early days of cryptology there was already a 
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Figure 16. 

recognition of the basic weakness of what we call single or monoalphabetic substitution, that 
is, where every letter in the plaintext message is represented by another and always the same 
letter. Solution of this type of cipher, as many of you may know, is accomplished by taking 
advantage of the fact that the letters of an alphabetic language are used with greatly differing 
frequencies. I don’t have to go into that now because many of you, at some time or other, 
have read Edgar AUan Poe’s “Gold Bug,” and understand the principles of that sort of analysis. 
It is clearly shown in the figure that the early Italian cryptographers understood the fact of 
varying frequencies and introduced stumbling blocks to quick and easy solution by having the 
high-frequency letters represented by more than a single character, or by several characters, 
as you can see. I will add that the earliest tract that the world possesses on the subject of 
cryptography, or for that matter, cryptanalysis, is that which was written in 1474 by a Neapol- 
itan, whose name was Sicco Simonetta. He set forth the basic principles and methods of 
solving ciphers, simple ciphers no doubt, but he describes them and their solution in a very clear 
and concise form. 

Cipher systems of the type I’ve described continued to be improved. In Fig. 16 is shown 
what we may call the first complete cipher system of this sort. There are substitution symbols 
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for each letter; the vowels have several equivalents; there are nuUs; and there is a small list 
of arbitrary symbols, such as those for “the Pope,” the word “and,” the conjunction “with,” 
and so on. This cipher, dated 1411, was used in Venice, and is typical of the ciphers used by 
the Papal chanceries of those days. 
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F^ure 16. 

The step remaining to be taken in the development of these ciphers was to expand the “vo- 
cabulary,” that is, the list of equivalents for frequently used words and syllables, the names 
of persons and places, parts of speech, and so on. This step was reached in Italy during the 
first half of the 15th Century and became the prototype of diplomatic ciphers used in prac- 
tically all the states of Europe for several centuries. One of 70 ciphers collected in a Vatican 
codex and used from about 1440 to 1469 is shown in Fig. 17. Note that the equivalents of the 
plaintext items are Latin words and combinations of two and three letters, and that they are 
listed in an order that is somewhat alphabetical but not strictly so. 1 suppose that by con- 
stant use the cipher clerks would learn the equivalents almost by heart, so that an adherence 
to a strict alphabetic sequence either for the plaintext items or for their cipher equivalents 
didn’t hamper their operations too much. In Fig. 18 there is much the same sort of arrange- 
ment, except that now the cipher equivalents seem to be digraphs, and these are arranged in 
a rather systematic order for ease in enciphering and deciphering. Now we have the real be- 
ginnings of what we caU a one-part code, that is, the same list will serve both for encoding and 
decoding. These systems, as I’ve said, remained the prototypes of the cryptography employed 
throughout the whole of Europe for some centuries. The Papal States used them, and as late 
as 1793 we find them used in France. I wish here to mention specifically the so-called King’s 
General Cipher used in 1562 by the Spanish Court. It is shown in Fig. 19. 

But there were two exceptional cases which show that the rigidity of cryptographic thought 
was now and then broken during the four centuries we have been talking about in this brief 
historical survey. Some of the Papal ciphers of the 16th Century and those of the French 
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Court under Kings Louis XIII and XIV exemplify these exceptions. In the case of these 
French Court ciphers we fund that a French cryptologist named Antonio Rossignol, who was 
employed by Cardinal Richelieu, understood quite well the weaknesses of the one-part code and 
syllabaries. It was he who, in about 1640, introduced a new and important improvement, the 
idea of the two-part code or syUabary, in which for encoding a message the items in the voca- 
bulary are listed in some systematic order, nearly always alphabetical; the code equivalents, 
whatever they may be, are assigned to the alphabetically listed items in random order. This 
means that there must be another arrangement or book for ease in decoding, in which the code 
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Figure 17. 



23 



GOlSFIDENT l A i: 




REF ID:A63860 



equivalents are listed in systematic order, numerically or alphabetically as the case may be, 
and alongside each appears its meaning in the encoding arrangement, or book. The signidcance 
of this improvement you’ll find out sooner or later. Codes of this sort also had variants — 
Rossignol was dever, indeed. One such code, found in the 1691 correspondence of Louis XIV 
had about 600 items, with code groups of two and three digits. Not at all bad, for those days! 

Now this sort of system would appear to be quite secure, and I suppose it was indeed so, 
for those early days of cryptographic development — but it wasn’t proof against the cleverness 
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Figure 19. 

of British brains, for the eminent mathematician John Wallis solved messages in it in 1689. 
Never underestimate the British in this science — as we’ll have reason to note in another lecture 
in this series."' 

French cryptography under Kings Louis XV and XVI declined, reaching perhaps its lowest 
level under Napoleon the Great. It is a fact that in Napoleon’s Russian enterprise the whole 
of his army used but a single code book of only 200 groups, practically without variants, even 
for the high-frequency letters. Furthermore, not all the words in a message were encoded — 
only those which the code clerk or the writer of the message thought were important. It’s 
pretty clear that the Russians intercepted and read many of Napoleon’s messages — ^this comes 
from categorical statements to this effect by Czar Alexander I himself. We won’t be far wrong 
in believing that the weaknesses of Napoleon’s crypto-communications formed an important 
factor in Napoleon’s disaster. A hundred and twenty-five years later, Russian ineptitude in 
cryptographic communications lost them the Battle of Taimenberg and eventually knocked 
them out of World War I. 

The other 16th Century Papal ciphers that constituted the second exception to the general 
similarity of cryptographic systems of those days were quite different from those I’ve shown 
you. In this exception the ciphers were monoalphabetic, but some letters had the same equiv- 
alent, so that on decipherment the context had to be used to decide which of two or more pos- 
sible plaintext values was the one meant by each cipher letter. One such cipher used by the 
Maltese Inquisitor in 1585 is shown below: You’ll note that the digit 0 has two values, A and 



* Official dedphering of 
year 1526, if not earlier. 



foreign communications by British cryptanalysts can be traced back to about the 
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CIPHER OF THE INQUISITOR OF MALTA (1585) 
(From SACCO. MANUALS DI CRITTOGRAFIA. 1947) 



Plain: 


A.T 


E.F I.G 


O.D 


U.V.B C.L.N M.R 


P.S.Z 


Cipher: 


0 


3 5 


4 


2 6 9 


7 


Nulls : 


1.8 










Plain: 


qua 


que qui quo 


Che 


chi non quando 


perchl et per 


Cipher: 


7 


9 6 2 


4 


5 3 0 


1.8 



T; the digit 2 has three values, U, V, and jB, and so on. There were two digits used as nulls, 
1 and 8; digits with dots above them stood for words such as qua, que, qui, and so on. 

Below is shown a message and its encipherment: A bit tricky, isn’t it? Many, many years 
later Edgar Allan Poe describes a cipher of this same general type, where the decipherer must 
choose between two or more possible plaintext equivalents in building up his plain text, the 
latter guiding the choice of the right equivalent. The trouble with this sort of cipher is that 
you have to have pretty smart cipher clerks to operate it and even then I imagine that in many 
places there would be doubtful decipherments of words. It wasn’t really a practical system 
even in those days, but it could, if used skillfully and with only a small amount of text, give a 
cryptanalsrst plenty of headaches. But such systems didn’t last very long because of the prac- 
tical difficulties in using them. 



Cipher: 


4 5 10 


2 0 4; 


L4094895620 


"Plain": | 


fO I A 
G T 


U A 0 
B T D 
V 


0 A M 0 
D T R D 


M I C U A 
R G L B T 
N V 


Plain : 


D I T 


U T 0 


D A R 0 


M I N U T 


Cipher: 


1 


4 5 6 


5 16 4 9 


5 3 9 3 8 


"Plain": ^ 


fET 

PER 

[PERCHE 


0 I C 
D G L 
N 


I COM 
G N D R 
L 


I E M E 
G F R F 


Plain: 


PER 


0 G N 


I COR 


I E R E 



0 2 5 7 4 
A U I P 0 
T B G S D 
V Z 

AVISO 



The first regular or official cipher bureau in the Vatican was established in about 1540 and 
in Venice at about the same time, about one hundred years before a regular cipher bureau was 
established in France by Cardinal Richelieu. It is interesting to observe that no new or re- 
markable ideas for cryptosystems were developed for a couple of hundred years after the com- 
plex ones I’ve described as having been developed by the various Papal cryptologists. One- 
part and two-part syllabaries and simple or complex ones with variants were in use for many 
decades, but later on, in a few cases, the code equivalents were superenciphered, that is, the 
code groups formed the text for the application of a cipher, generally by rather simple systems 
of adffitives. Governmental codes were of the two-part type and were superenciphered by the 
more sophisticated coimtiies. 

The first book or extensive treatise on cryptography is that by a German abbot named 
Trithemius, who published in 1531 the first volume of a planned monumental 4-volume work. 
I said that he plaimed to publish four volumes; but he gave up after the third one, because he 
wrote so obscurely and made such fantastic claims that he was charged with being in league 
with the Devil, which was a rather dangerous association in those or even in these days. They 
didn’t bum Trithemius but they did bum his books. Figure 20 IQustrates that the necessity 
for secrecy in this business was recognized from the very earliest days of cryptology, and cer- 
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tainly by Trithemius. Here is the sort of oath that Trithemius recommended be administered 
to students in the science of cryptology. All of you have subscribed to a somewhat s imilar 
oath, but we now go further and back up the oath with a rather strict law. You’ve aU read it, 
I’m sure. 
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Figure 20. 



We come now to some examples from more recent history. In Fig. 21 we see a cipher alpha- 
bet used by Mary, Queen of Scots, who reigned from 1542 to 1567 and was beheaded in 1587. 
In this connection it may interest you to learn that question has been raised as to whether the 
Queen was “framed” by means of this forged postscript (Fig. 22) in a cipher that was known 
to have been used by her. 
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The Spanish Court under Philip II, in the years 1555-1598, used a great many ciphers and 
here’s one of them (Fig. 23). You see that it is quite complex for those early days and yet 
ciphers of this sort were solved by an eminent French mathematician named Vieta, the father 
of modem algebra. In 1589 he became a Councelor of Parliament at Tours and then Privy 
CoimciUor. While in that job he solved a Spanish cipher system using more than 500 charac- 
ters, so that aU the Spanish dispatches falling into French hands were easily read. Philip was 
so convinced of the security of his ciphers that when he found the French were aware of the con- 
tents of his cipher dispatches to the Netherlands, he complained to the Pope that the Frendi 
were using sorcery against him. Vieta was called on the carpet and forced .to explain how 
he’d solved the ciphers in order to avoid being convicted of sorcery, a serious offense. 
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Figure 22. 
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Figure 24. 



The next cryptologist I want you to know something about is another Italian savant who 
wrote a book, published in 1563, in which he showed certain types of cipher alphabets that 
have come down in history and are famous as Porta’s Alphabets. Figure 24 is an example of 
the Porta Table, showing one alphabet with key letters A or B, another alphabet with key 
letters C or D, and so on. I don’t want to go into exactly how the key letters are used; it is 
sufficient to say that even to this day cryptograms using the Porta alphabets are occasionally 
encountered. 

That Porta’s table was actually used in offidal correspondence is shown by Fig. 25, whidi is 
a picture of a table found among the state papers of Queen Elizabeth’s time; it was used for 
communicating with the English Ambassador to Spain. Porta was, in my opinion, the greatest 
of the old writers on cryptology. 1 also think he was one of the early, but by no means the 
first, cryptanalyst able to solve a system of keyed substitution, that is, where the key is changing 
consistently as the message undergoes encipherment. Incidentally, Porta also was the inventor 
of the photographic camera, the progenitor of which was known as the camera obscura. 

Figure 26 is a picture of what cryptographers usually call the Vigenfere Square, the Vigenfere 
Table, or the Vigen&re Tableau. It consists of a set of twenty-six alphabets successively dis- 
placed one letter per row, with the plaintext letters at the top of the square, the key letters at 
the side, and the cipher letters inside. The method of using the table is to agree upon a key 
word, which causes the equivalents of the plaintext letters to change as the key changes. Vig- 
en^ is commonly credited with having invented that square and cipher, but he really didn’t 
and, what’s more, never said he did. His table, as it appears in his book, the first edition of 
which was published in 1586, is shown in Fig. 27. It is more complicated than as described in 
ordinary books on cryptology. 

Figure 28 is one more example of another old offidal cipher. In it we can see the alphabets 
which could be did up and down, as a means of dianging the key. Another early offidal dpher 
is shown in Fig. 29. It is a fisicsimile of a state dpher used in Charles the First’s time, in 1627, 
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for communicating with France and Flanders. It involves coordinates, and I want you to no- 
tice that there are two complete alphabets inside it, intended to smooth out frequencies. The 
letters of the key words OPTIMUS and DOMINUS serve as the coordinates used to represent 
the letters inside the square. A third old cipher, one used by George III in 1799, is shown in 
Fig. 30. 

One writer deserving special attention as a knowledgeable cryptologist in the 17th Century* 
and the one with whose cipher 1’U close this lecture, is Sir Francis Bacon, who invented a very 
useful cipher and mentioned it for the first time in his Aduancement of Learning, published in 
1604, in London. The description is so brief that I doubt whether many persons understood 
what he was driving at. But Bacon described it in full detail, with examples, in his great book 
De Augmentis Scientiarum, which was published almost 20 years later, in 1623, and which first 
appeard in an English translation by Gilbert Wats in 1640 under the title The Advancement of 
Learning. Bacon called his invention the Bilitercd Cipher, and it is so ingenious that I think 
you should be told about it so that you will all fully understand it. 



In his De Augmentis Bacon writes briefiy about ciphers in general and says that the virtues 
required in them are three: “that they be easy and not laborious to write; that they be safe, 
and impossible to be deciphered without the key; and lastly, that they be, if possible, such as 
not to raise suspicion or to elude inquiry.” He then goes on to say: “But for avoiding suspicion 
altogether, I will add another contrivance, which I devised myself when I was at Paris in my 
early youth, and which I stiU think worthy of preservation.” Mind you, this was 40 years 
later! Let’s consult Bacon for further details. In Fig. 31 we see a couple of pages of the 



Gilbert Wat’s translation of Bacon’s De Augmentis Scientiarum. 



Bacon shows what he calls 
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I □□QESIEQBQDDQDIEOElQBnJtBSOQQ^SDmj 

El □□□□□HEiQBnQDIiaiaBIlinaBDEaDSSQKiB 



EUBIi^QBElQDulBBniClQBaBDQQiaBBdBQ 
tm HHUiaHI3a[!]2QDE3E1E3GDQDQSSBBI3QBD 
BniiitmaiJSjiEaBraEiaBEiciasaBiaBBiiiBBBEi 

0 oiQnQanaoBnnBBQQaaBiaBQiLaBBBEiB 
DUIi]l3Uuj]QQnnDBBQDQBBBBI3QUBBBU 
OaUUBBDranQBBElDSQBEaDQBClBQBIIlE] 
OQU[3QE]n]inQE]0[3aQDraBDI>]QQBQI3II]|]|| 
laiisuiaBQnQBiiQDQBraBBUBEiBliBinBnr 
EH □□□□□□BOBBiSOraBBiaBElBEIBiaPilia 

Q QianQElQEnDQQRiBBiaQClDOBiaDQQgSi 
ElillBQBBQDBQBBBQBBQBEimunQnlDL 
OElQBDQDQBBQBBQBBBEliaDnyDBiQri 
El □□□□□[SQraBB&aBBQOBiaHnQOuaBBraci 
ElBBBBfflBHBHBaBBBBaUMlianEaiaBHHr 
EaBBDfflQBBBiaBBBB^mOE113BE!r~ 
laBBSSBBBEIBBBBQBClBQiaDiaBI 
m □SaQQBBQBBBliEiaBnQBmIBBBClB 
CaSSBBBBBBBBBBIIlBaBBuSBBBn^ 

01 BBBBBBLlBUIltilBElBUBBEiraEIB^. 
HBBBBBBBBBaBQinBBBDninDBBE 
aBH BHB BaEBBHaBiaB ani ElBB H SaBaBI 



Figiire 26. 
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“An Example of a Bi-literaire Alphabet,” that is, one composed of two elements which, taken 
in groupings of fives, yields 32 permutations. You can use these permutations to represent the 
letters of the alphabet, says Bacon, but you need only 24 of them [because I and J, U and V, 
were then used interchangeably]. These permutations of two different things — ^they may be 
“a’s” and “6’s”, “I’s” and “2’s”, plusses and minuses, apples and oranges, anything you please — 
can be used to express or signify messages. Bacon was, in fact, the inventor of the binary code 
which forms the basis of modem electronic digital computers. Bacon gives a brief example in 
the word “FUGE” — the Latin equivalent for our modem “SCRAM” — ^as can be seen in Pig. 
31. Figure 32 is another example, which quite obviously isn’t what it appears to be — a crude 
picture of a castle, in which there are shaded and unshaded stones. It was drawn by a friend 
who was a physician and the message conveyed by it is: 

My business is to write prescriptions 
And then to see my doses taken; 

But now I find 1 spend my time 
Endeavoring to out-Bacon Bacon. 
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Figure 28. 



Figure 29. 
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So far all this is simple enough — ^too much so. Bacon says, for the example he used in the 
case of the word FUGE is patently cryptic and would not avoid suspicion under examination. 
So Bacon goes on to describe the next step, which is to have at hand a “Bi-formed Alphabet,” 
that is, one in which aU the letters of the alphabet, both capital and small, are represented by 
two slightly different forms of lett^ (Fig. 33). Having these two different forms at hand, 
when you want to encipher your secret message, you write another external and innocuous mes- 
sage five times as long as yoxu: secret message, using the appropriate two forms of letters to 
correspond to the “a’s” and “6’s” representing your secret message. Here’s FUGE (Fig. 34), 
enciphered within an external message saying “Manere te volo donee veniam,” meaning “Stay 
where you are until I come.” In other words, whereas the real message says “SCRAM,” the 
phoney one says “Stick around awhile; wait for me.” Bacon gives a much longer example, the 
SPARTAN DISPATCH; here it is, and here’s the secret message which it contains (Fig. 35). 

Bacon’s biliteral cipher is an extremely ingenious contrivance. There can be no question 
whatsoever about its authenticity and utility as a valid cipher. Thousands of people have 
checked his long example and they all find the same answer — ^the one that Bacon gives. 

Figure 36 is a modem example which uses two slightly different fonts of type called Garamond 
and Imprint, and which are so nearly alike that it takes good eyes to differentiate them. 

The fact that Bacon invented this cipher and described it in such detail lends plausibility to 
a theory entertained by many persons that Bacon wrote the Shakespeare Plas^ and that he in- 
serted secret messages in those plays by using his cipher. If you’d like to learn more about 
this theory I suggest with some diffidence that you read a book entitled The Shakespearean 
Ciphers Examined. I use the word diffidence because my wife and I wrote the book which was 
published in late 1957 by the Cambridge University Press. 

In the next lecture we’U take up cryptology as xised during the period of the American Revo- 
lution by both the Colonial and the British Forces in America. 
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a££aa..a£Sa£ • a$SS(t> •aSS^.Saaao.-SaatS^ 

•31 V w as jr 

baa&iMu^.^aa>>Sa^.^i£Sa..^a£^]^. 

Nachet is it a (mall matter the(e C^htr-ChdraBen have^nd 
may peifbrmc : For by this Art a way is opened, whereby a 
man may cxpielTe and (ignifie the intentions of his minde at 
any diflanceofplace, by objedts which may be prefentedto 
(he eye, and accommodated to the eare : providm thole ob< 
je^ts be capable of a twofold difletence oncly ; as by Bells, by 
Tmmpcts, by Ligha and Torches, by the report of Muskets, 
and any inArumcnts of like nature. But to purfue our enter- 
pnfe, when you addrefle your Cdfe to write, rclblve your in* 
watd-inlold^ Letter into this ‘Bt-Utadrie Al^iakit. Say the i«. 
tenMi-Lrtto'be 
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BxamfttfSdutitn. 
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daSSa, 
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Figvire 31. 
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Together with this,you muft have ready at hand z'BufisrmJL 
Alphabet ^ which may repreienc ail the Letters of the Common AU 
as well Capicall Letters as the Smaller Chara£bersina 
double forme^as may fit every mans occadon. 

Bxmj^ (f a 'Bi- formed Alphabet, 

- €1, <l,£. a^£.a> £n£.d>. £.a,.£. 

££ C, 0!o,c!^.i5.cC(£! 

£,€l,£, €l, £ m €l,£, a, £• . £,a,£, 

} 

,c.t, 

^ £^£f\ £* £, £m 

^^C^CauuO. 6.o.oi 

,it.1d'^ 

^ £• ^t'*£m A[f 0 £m iL, i^9€L,^*^f^,Ar,£» 




Lit 

Figure 33. 
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it, tRe, 

PUTI No. SI 



Figure 34. 



Figure 3i. 



In all duty or rather piety towards you I satisfy every body except 
myself. Myself I never satisfy. For so ^eat are the services which you 
have rendered me, that seeing you did not rest in your endeavours on my 
behalf till the thing was done, I feel as if life had lost all its sweetness, 
because I cannot do as nrnch in this cause of yours. The occasions are 
these: Ammonius the Kin^s ambassador openly besieges us with money: 
the business is carried on through the same creditors who were employed 
in it when vou were here, <i^c. 



Figure 36. 
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Lecture III 



Continuing with our survey of cryptologic history, the period of the American Revolution, 
in U. S. history, is naturally of considerable interest to us and warrants more than cursory 
treatment. Information regarding the codes and ciphers employed during that period has been 
rather sparse until quite recently, when a book entitled Turncoats, Traitors and Heroes by Col. 
John Bakeless, AUS, was published in 1959 by Lippincott. After a good many years of re- 
search Col. Bakeless brought together for the first time a considerable amount of authentic in- 
formation on the subject, and some of it is incorporated in this lecture. 

According to Col. Bakeless — and believe it or not — in early 1775 the British commander-in- 
chief in America, General Gage, had no code or cipher at all, nor even a staff officer who knew 
how to compile or devise one; he had to appeal to the commanding general in Canada, from 
whom he probably obtained the single substitution cipher which was used in 1776 by a British 
secret agent who — again, believe it or not — ^was General Washington’s own director-general of 
hospitals. Dr. Benjamin Church. General Washington had means for secret communication 
from the very beginning of hostilities, probably even before the fighting began at Lexington 
and Concord. If the British under General Gage were poorly provided in this respect, by the 
time Sir Henry Clinton took over from General Howe, who succeeded Gage, they were much 
better off — they had adequate or apparently adequate means for secret communication. 

Are you astonished to learn that the systems used by the American colonial forces and by 
the British regulars were almost identical? You shouldn’t be, because the language and back- 
grounds of both were identical. In one case, in fact, they used the same dictionary as a code 
book, something which was almost inevitable because there were so few English dictionaries 
available. Here’s a list of the systems they used: 

a. Simple, monoalphabetic substitution — easy to use and to change. 

b. Monoalphabetic substitution with variants, by the use of a long key sentence. 1’U show 
you presently an interesting example in Benjamin Franklin’s system of correspondence with 
the elder Dumas. 

c. The Vigen&e cipher with repeating key. 

d. Transposition ciphers of simple sorts. 

e. Dictionaries employed as codebooks, with and without added encipherment. Two were 
specially favored, Entick’s New Spelling Dictionary, and Bailey’s English Dictionary. A couple 
of pages from the former are shown in Fig. 37. To represent a word by code equivalent you 
simply indicated the page number, then whether column 1 or column 2 contained the word you 
wanted, and then the number of the word in the column. Thus: The word “jacket” would be 
represented by 178-2-2. 

f. Small, specially compiled, alphabetic one-part codes of 600-700 items and code names — 
our old friend the syllabary, or repertory, of hoary old age, but in new dress. In some cases 
these were of the “one-part” or “alphabetic” type. 

g. Ordinary books, such as Blackstone’s Commentaires on the Laws of England, giving the 
page ntunber, the line number and the letter number in the line, to build up, letter-by-letter, 
the word to be represented. Thus: 125-12-16 would indicate the 17th letter in the 12th line 
on page 125; it might be the letter T. 

h. Secret inks. Both the British and the Americans made extensive use of this method. 

i. Special designs or geometric figures, such as one 1’U show you presently. 

j. Various concealment methods, such as using hollow quills of large feathers or hollowing 
out a bullet and inserting messages written on very thin paper. Strictly speaking, however, 
this sort of strategem doesn’t belong to the field of cryptology. But it’s a good dodge, to be 
used in special cases. 
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Hyp, V. a. t* mtkc melaacholjr, to dtfpint 
Hypa/lige,/ a ckanfcof cafes, Sfc. 
Hypei'bole, f. an cMggention, a dimiantion 
Hyperboi'ical, a. estacnaing or cnehuating 
HyperWican, a. nonhctn (reafnn 

H/per, Hypcrcrii'ic,yi a ciiric MaA beyond 
Hypercrit'ical, a. critical beyond niSr, fceere 
Nypei'metcr.^ whatii above the ftaadtrd 
HyperfaikcGs,/. a growth of proad flelh 
H)'phen,y. (■) between words or fyliablet 
H> pnoi'ic,/ a medicine caiiliag fleep 
HypoehonMriae,/^ one affeAed with melanckoly 
Hypochon'driacal, a. neiancheiy 
Hvpoc'rify, /, diffimnlatioa, a pretence 
Hyp'oi.rite, jil a diflembler in religion, fife. 
Hypoci^icd, n. diflenibiing, iafiacere, faMe 
Hypocrit'iaally, aJ. wit|ioat Cccerity, falfb'y 
H)pugas'trie,n. io the lower part of the belly 
Hvpiia''afi<,^ a diAinA fnbAaree, pcrfcnali^ 
Hypbftat'ical, a. cooAitutivc, diAinA, petfona* 
Hypoth'a6<,jT. a fyAeoi upon fu|lpafitioa 
Hypothetical, a. fuppofed, conditional 
Hvd tbet'ically, ai. upon fuppolition 
HyrA, HurA or HerA, £ a wood 



H.n I'lc, a. tfoubled with Ata 
Hy Aei'ica, f. //, Ah of womcA 
1 . 



I pm. mjfelf 

, Jab'ber, «. «. to Mile idly, to chatter 
Jab'beicr, />^one who taikt anintelligibly 
Jieent, a. lying at length, ectended 
Jacinth, f. a gem, the hyacin'h 

j ack,/. John, an engiae, AA< leathern eann 
aek'al,/ a beaA that Aaru the lion’s prey 
aekalenti/'a Ample AieepiAi fellow 
ack‘anapaa,_C a monkey, aeoxcomb 
ackboutSf/* boeie iervtng Air amor 



J ack'daw,y. a chattenng bird ^ 
acli'cl, f. a waiAcoat^a diort 
Jaek'padding, f. a merry andrew, a biilbMI 
jtc^obite,/. a partisan of James II. 
JaAitition,^ a toffiog motion, reAleflheft 
JaeaUtioD./. the aA of throwing or darting 
ade, a bad wnman, a woithlelb horTc 
Tadc, «. d. to tire, weary, ride dbwn, fidk 
fidiA, a. unruly, vicious, unchaAe 
aggt v.«. to neieh;J’.a dendculatio»/ilie*ena<ft 
ag'giog, f. a cutting in notches 
agpy,«. uneven, notched 
all,/ aprifon, agnal 
aifer,/ the keeper of a prilhv • 
akes, C akoufe of Ofiee, a bo|^Auft 
am, /.aconferveof firuit, ackiM's ftbek^ 
am, «. a. to ennfine betsseer, to wedge in 
amb,jl the upright poftef a door 
am'bie,/ vetAn eose^M ef a long andsMit 
ft liable alternately 

fan'gte, v. n. to utrengle, to be net of tone 
llaifiaaty,/, a TurhiAi feldier, a guard 
aniy. a'. Aowy, Auttering, gay, giddy 
Jan'uary, the ArA month of the year 
I apan,/ a varniA to woik in colon 
' apan, v. a. to va'OiA, to black Aoet 
' apan'iier,'/ a Aeebtack, one srha jayaAk' 

' ar, V. a to claA, difagree, diffc', ^pMinl 
*r,f. difroid, a baiA found, an earthen veM 
] .tgo^glr, V. a. to cotifbuod, perplen, pervert 
\ ai'gon,^ gibbrriAiy gabife, nobfenlk 
' as'mine, Ja-ftminr,/ a Aower 
' aa'per, f. a precious greeo done 
‘ av'rlin,/ a fpesr or half pike 
] iun'diee,/.a diAemper 
' aun'dieed, a. alFoAed with the Jahadim 
] aunt, V. a. to walk or travel about 
Jaunt,/, a ramble, aacmA<a,Miy 



Figure 37. 



In the way of ciphers a bit more complex than simple monoalphabetic substitution ciphers, 
the British under Clinton’s command used a system described by Bakeless in the following 
terms: 

. “ . . . a substitution cipher in which the alphabet was reversed, ‘z’ becoming ’a’ and ‘a’ becom- 
ing ‘z’. To destroy frequency clues, the cipher changed in each line of the message, using *y' 
for ‘a’ in the second line, ‘x’ for ‘a’ in the third, and so on. When the cipher clerk reached ‘o’ 
in the middle of the alphabet, he started over again. A spy using this cipher did not have to 
carry incriminating papers, since the system was so easy to remember.” 

The alphabets of this scheme are simple reversed standard alphabets: 



CDEFGHIJ 



RSTUVffXYZ 



X W V U 
W V U T 
V U T S 
U T S R 
T S R Q 
S R Q P 
R Q P 0 
Q P 0 N 
P 0 N M 
0 N M L 
N M L K 
M L K J 



T S R Q 
S R Q P 
R Q P 0 
Q P 0 N 
P 0 N M 

0 N M L 
N M L K 
M L K J 
L K J I 
K J I H 
J I H G 

1 H G F 



PON 

0 N M 
N M L 
M L K 
L K J 
K J I 
J I H 

1 H G 
H G F 
G F E 
FED 
EDO 



I H G 
H G F 
G F E 
FED 
EDO 
D C B 
C B A 
B A Z 
A Z Y 
Z Y X 
Y X W 
X W V 



D C B A 
C B A Z 
B A Z Y 
A Z Y X 
Z Y X W 

Y X W V 
X W V U 
W V U T 

V U T S 
U T S R 
T S R Q 
S R Q P 
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Bakeless doesn’t explain why the cipher sequences are only 12 in number — nor does the 
source from which he obtained the information, a note found among the Clinton Papers in the 
Clements Library at the University of Michigan. 

Bakeless continues: 



“Clinton also used another substitution cipher, with different alphabets for the first, second 
and third paragraphs. Even if an American cryptanalyst should break the cipher in one para- 
graph, he would have to start all over in the next. As late as 1781, however. Sir Henry was 
using one extremely clumsy substitution cipher, in which ‘a’ was 51, ‘d’ was 54, ‘e’, 55. Finding 
that ‘a’ was 51 and ‘d’ was 54, anyone could guess (correctly) that ‘b’ was 52, ‘c’ 53. Somewhat 
more complex was his ‘pigpen’ cipher, in which twenty-five letters of the alphabet were placed 
in squares. Then an angle alone would represent a letter, the same angle with a dot another 
letter, the same angle with two dots stfil another. In some cases, cryptography was used only 
for a few crucial words in an otherwise ‘clear’ message, a method also favored by certain Ameri- 
can officials.” 

Of the first cipher mentioned in the preceding extract, there is much more to be said. Per- 
haps Bakeless was limited by space considerations. In any case, I will leave that story for 
another time and place. As for the second cipher Bakeless mentions in the extract, I can give 
you the whole alphabet, for it exists among the Clinton Papers. 

ABCDEFGHIKLMNOPQRSTUWXYZ 
51 52 53 54 55 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 



There is no explanation why the sequence beginning with 50 stops with E-55 and then, 
starting with F-60 goes straight on without any break to Z-78. (Remember that in those 
days I and J were used interchangeably, as were U and V.) 

Finally, as to what Bakeless (and others) call the “pigpen” cipher, this is nothing but the 
hoary old so-called “Masonic” cipher based upon the 4-cross figure 



abc 



















_J b- _J c- 



which can accommodate 27 characters, not 25, as Bakeless indicates. Letters caii be inserted 
in the design in many different arrangements. 

I’ve mentioned that code or conventional names were used to represent the names of im- 
portant persons and places in these American colonial and British cryptograms of the Revo- 
lution. Here are examples selected from a list of code names prepared by the famous British 
spy. Major Andr4, chief of intelligence under General Clinton: 



For American Generals — ^the names of the Apostles, for instance: 

General Washington was James 
General Sullivan was Matthew 

Names of Forts: 

Fort Wyoming — Sodom 
Fort Pitt — Gomorrha 

Names of Cities: 

Philadelphia — Jerusalem 
Detroit — Alexandria 



Names of Rivers and Bays: 



Susquehanna — Jordan 
Delaware — Red Sea 



Miscellaneous: 



Indians — Pharisees 
Congress — Synagogue 
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I’m sure you’ve learned as school children aU about the treasonable conduct of Benedict 
Arnold when he was in command of the American Forces at West Point; but you probably 
don’t know that practically aU his exchanges of communications with Sir Henry Clinton, Com- 
mander of the British Forces in America, were in cipher or in invisible inks. One of Arnold’s 
cipher messages, in which he offers to give up West Point for £20,000 is shown below. Fig. 
38a being the secret version. Fig. 386, the plain text. Arnold left a few words en dair, the ones 
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Figure 38a. 
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Figure 386. 



he considered unimportant; for the important ones he used a dictionary as a codebook, indi- 
cating the page number, column number and line number corresponding to the position in the 
dictionary of the plaintext word which the code group represents. Arnold added 7 to these 
numbers, which accounts for the fact that the first number in a code group is never less than 8, 
the central number is always either 8 or 9, and the third number is never less than 8 or more 
than 36. The significant sentence appears near the middle of the message: “If I 198-9-34, 
185-8-31 a 197-8-8 ...” yields the plain text: “H I point out a plan of cooperation by which 
S. H. (Sir Henry Clinton) shall possess himself of West Point, the Garrison, etc., etc., etc., 
twenty thousands pound Sterling I think wiU be a cheap purchase for an object of so much 
importance.” The signature 172-9-19 probably stands for the word “Moor”; Arnold’s code 
name in these communications was “John Moore.” He had also another name, “Gustavus.” 
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Figure 39 is a message in which he gave the British information whidi might have led to the 
capture of his commander-in-chief. General Washington; the top shows the code message, the 
bottom the plain text. Arnold used the same additive as in the preceding example. Wash- 
ington, however, was too smart to be flTnhiiBVwd — ^he went by a route other than the one he 
said he’d take. 



jC- ■■■■■, 

'L .bA r 




■ .I, i/C^.— 



^ .I n . ^^4.. * pi4 * 



Sir 

W. Howe 
is gone to the 
Cheasapeak bay with 
the greatest part of the 
anpy. Ihearheisnow 
landed but am not 
certain. I am 
left to command 
here with a 
too small force 
to make any effectual 
diversion in your favor 
I shall try something cer 
At any rate It may be of use 
to you. I own to you I think 
Sf W’s move just at this time 
the worst he could take 
much joy on your success 



Figure 40. 



You may find Fig. 40 interesting as an example of the special sort of mask or grille used by 
Arnold and by the British in their negotiations with him. The real or significant text is writ- 
ten in lines outlined by an hourglass figure and then dummy words are supplied to fill up the 
lines so that the entire letter apparently makes good sense. To read the secret message, you’re 
supposed to have the same size hourglass figure that was used to conceal the secret message. 
In Fig. 40 the left-hand portion shows the “phoney” message. Masks having small rectangu- 
lar apertures were also used, the significant words being written so that they were disclosed 
when the mask was placed on the written message so as to isolate them &om the non signifi- 
cant words. The significant text in this example is shown in printed form to the right of the 
original hourglass design. 

An interesting episode involving concealment of this sort is recorded by Bakeless. An ur- 
gent message from Sir Henry Clinton, dated 8 October 1777, and written on thin silk, was con- 
cealed in an oval silver ball, about the size of a rifle bullet, whidh was handed to Daniel Taylor, 
a young officer who had been promised promotion if he got through alive. The bullet was 
made of silver, so that the spy could swallow it without injury from corrosion . . . Almost as 
soon as he started, Taylor was captured . . . Realizing his peril too late, the spy fell into a 
paroxysm of terror and, crying, “I am lost,” swallowed the silver bullet. Adrninistration of a 
strong emetic soon produced the bullet witii fatal results, for Taylor was executed. “A rather 
heartless American joke went around,” adds Bakeless, “that Taylor had been condemned ‘out 
of his own mouth’.” 

We next see (Fig. 41) one Benedict Arnold message that never was dedphered. It is often 
referred to as “Benedict Arnold’s Treasonable Cow Letter.” Only one example is extant; 
certain words have purely arbitrary meanings, as prearranged. The letter was written just 
two weeks before the capture of Major Andr4. 

In Fig. 42, we see a British cipher message of the vintage 1781. It was deciphered d^ore 
finding the key, always a neat trick when or if you can do it. The key — ^the title page of the 
then current British Army List — ^is shown in Fig. 43. The numbers in the dLpher text obvi- 
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Figure 41. 




ously refer to line numbers and letter numbers in the line of a key text, the first series of num- 
bers, viz., 22.6,7.39.5.9.17, indicating line number 22, letter numbers 6.7.39.5.9.17 in that line. 
Because of so many repetitions, the plain text was obtained by straightforward analysis by an 
officer recently on duty in NSA, Captain Edward W. E^pper, USN, to whom I am indebted 
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for this interesting example. The plain text, once obtained, gave him clues as to what the key 
text mi ght be, simply by placing the plaintext letters in their numerical-equivEilent order in 
the putative key text. This done. Captain Knepper was quick to realize what the key text 
was — a British Army List. The date of the message enabled him to find the list without much 
difficulty in the Library of Congress (Fig. 43). 

There was an American who seems to have been the Revolution’s one-man National Security 
Agency, for he was the one and only cryptologic expert Congress had, and, it is claimed, he 
managed to decipher nearly all, if not all, of the British code messages obtained in one way or 
another by the Americans. Of course, the chief way in which enemy messages could be ob- 
tained in those days was to capture couriers, knock them out or knock them off, and take the 
messages from them. This was very rough stuff, compared to getting the material by radio 
intercept, as we do nowadays. 

I think you’ll be interested to hear a bit more about that one-man NSA. His name was 
James Lovell and besides being a self-trained cryptologist, he was also a member of the Con- 
tinental Congress. There’s on record a very interesting letter which he wrote to General 
Nathaniel Greene, with a copy to General Washington. Here it is. 

Philadelphia, Sept. 21, 1781 



Sir: 

You once sent some papers to Congress which no one about you could dec v pher. Should such 
be the Case with some you have lately forwarded I presume that the Result of my pains, here 
sent, will be useful to you. I took the Papers out of Congress, and I do not think it necessary 
to let it be known here what my success has been in the attempt. For it appears to me that 
the Enemy make only such Changes in their Cypher, when they meet with misfortune, as makes 
a difference of Position only to the same Alphabet, and therefore if no talk of Discovery is made 
by us here or by your Family, you may be in Chance to draw Benefit this Campaign from my 
last Night’s Watching. 

I am Sir with much respect. 

Your Friend, 

JAMES LOVELL 

Maj. Genl. Greene 

(With copy to Genl. Washington) 



In telling you about LoveU I should add to my accoxmt of that interesting era in cryptologic 
history an episode I learned about only recently. When a certain message of one of the gen- 
erals in command of a rather large force of Colonials came into Clinton’s possession he sent it 
off posthaste to London for solution. Of course, Clinton knew it was going to take a lot of 
time for the message to get to London, be solved and returned to America — and he was natu- 
rally a bit impatient. He felt he couldn’t afford to wait that long. Now it happened that in 
his command there were a couple of officers who fancied themsdLves to be cryptologists and 
they undertook to solve the message, a copy of which had been made before sending the original 
off to London. Well, they gave Sir Henry their solution and he acted upon it. The operation 
turned out to be a dismal failure, because the solution of the would-be cryptanalysts happened 
to be quite wrong! The record doesn’t say what Clinton did to those two unfortunate cryptol- 
ogists when the correct solution arrived from London some weeks later. By the way, you may 
be interested in learning that the British operated a regularly established crsrptanalytic bu- 
reau as early as in the year 1630 and it continued to operate until the end of July 1844. Then 
there was no such establishment until World War I. I wish there were time to tell you some 
of the details of that fascinating and little known bit of British history. 

There’s also an episode I learned about only very recently, which is so amusing I ought to 
share it with you. It seems that a certain British secret agent in America was sent a message 
in plain English, giving him instructions from his superior. But the poor fellow was illiterate 
and there wasn’t anything to do but call upon the good offices of a friend to read it to him, 
He found such a friend, who read him his instructions. What he didn’t know, however, was 
that the friend who’d helped him was one of General Washington’s secret agents! 
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The next illustration (Fig. 44) is a picture of one of several syllabaries used by Thomas 
Jefferson. It is constructed on the so-called two-part principle, whidi was explained in the 
preceding lecture. Figure 44a is a portion of the encoding section, and Fig. 44b is a portion 
of the decoding section, in which the code equivalents are in numerical order accompanied by 
their meanings as assigned them in the encoding section. This sort of system, whichi, as I’ve 
already explained, was quite popular in Colonial times as in the early days of Italian cr 3 q>tog- 
raphy, is stiU in extensive use in some parts of the world. 
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Figure 44a. 



Figure 446. 



A few minutes ago I mentioned Benjamin Franklin’s cipher system, which, if used today, 
would be difficult to solve, especially if there were only a small amount of traffic in it. Let 
me show you what it was. Franklin took a rather lengthy passage from some book in French 
and numbered the letters successively. These munbers then became equivalents for the same 
letters in a message to be sent. Because the key passage was in good French, naturally there 
were many variants for the letter E — ^in fact, there were as many as one would expect in nor- 
mal plaintext French; the same applied to the other high-frequency letters such as R, N, S, I, 
etc. What this means, of course, is that the high-frequency letters in the plain text of any 
message to be enciphered could be represented by many different numbers and a solution on 
the basis of frequency and repetitions would be very much hanpered by the presence of many 
variant values for the same plaintext letter. In Fig. 45 you can see this very clearly. 




Figure 45. 
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I know of but one case in all our U. S. history in which a resolution of Congress was put out 
in cryptographic form. It is shown in Fig. 46 — a resolution of the Revolutionary Congress 
dated 8 February 1782. I have in my collection not only a copy of the resolution but also a 
copy of the syllabary by which it can be deciphered. 

Interest in cryptology in America seems to have died with the passing of Jefferson and 
Franklin. But if interest in cryptology in America wasn’t very great, if it existed at all after 
the Revolution, this was not the case in Europe. Books on the subject were written, not by 
professionals, perhaps, but by learned amateurs, and I think you will find some of them in the 
NSA library if you’re interested in the history of the science. The next illustration (Fig. 47) 
is the frontispiece of a French book the title of which (translated) is “Counter-espionage, or 
keys for all secret communications.’’ It was published in Paris in 1793. In the picture, we 
see Dr. Cryppy himself, and perhaps a breadboard model of a GS-11 research analyst, or may- 
be an early model of a WAC. 




Figure 46. 

1 am now going to tell you something about the early steps in finding an answer to the age- 
old mystery presented by Egyptian hieroglyphics, not only because I think that the solution 
represents the next landmark in the history of cryptology, but also because the story is of gen- 
eral interest to any aspirii^ cryptologist. About 1821 a Frenchman, ChampoUion, startled 
the world by beginning to publish translations of Egyptian hieroglyphics, although in the 
budding new field of Egyptology much had already transpired and been published. In Fig. 
48 we see the gentleman and in Fig. 49, a picture of the great Napoleonic find that certainly 
facilitated and perhaps made possible the solution of the Egyptian hieroglyphic writing — ^the 
Rosetta Stone. The Rosetta Stone was found in 1799 at Ra^d, or, as the Europeans call it, 
Rosetta, a town in northern Egypt on the west bank of the Rosetta branch of the Nile. Ro- 
setta was in the vicinity of Napoleon’s operations wludi ended in disaster. When the peace 
treaty was written. Article 16 of it required that the Rosetta Stone, the significance of which 
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was quickly understood by both the conquered French and victorious British commanders, be 
shipped to London, together with certain other large antiquities. The Rosetta Stone still 
occupies a prominent place in the important exhibits at the British Museum. The Rosetta 
Stone is a bilingual inscription, because it is in Egyptian and also Greek. The Egyptian por- 
tion consists of two parts, the upper one in hieroglyphic form, the lower one in a sort of cursive 




Figure 47. Figure 48. 

script, also Egyptian, but called “Demotic.” It was soon realized that all three texts were 
supposed to say the same thing, of course, and since the Greek could easily be read, it served 
as something called in cryptanalysis a “crib.” Any time you are lucky enough to find a crib 
it saves you hours of work. It was by means of this bilingual inscription that the Egyptian 
hieroglyphic writing was finally solved, a feat whidi represented the successful solution to a 
problem the major part of which was linguistic in character. The cryptanalsrtic part of the 
task was relatively simple. Nevertheless, I think that anyone who aspires to become a pro- 
fessional cryptologist shoxild have some idea as to what that cryptanal 3 rtic feat was, a feat 
which some professor (but not of cryptologic science; 1 think it was Professor Norbert Wiener, 
of the Massachusetts Institute of Technology) said was the greatest cryptanalytic feat in 
history. We shall see how wrong the good professor was, because I’m going to demonstrate 
just what the feat really amounted to by showing you some simple pictures. 

First, let me remind you that the Greek text served as an excellent crib for the solution of 
both Egyptian texts, the hieroglyphic and the Demotic, the latter merely being the conven- 
tional abbreviated and modified form of the Hieratic character or cursive form of hieroglyphic 
writing that was in use in the Ptolemaic Period. 

The initial step was taken by a Reverend Stephen Weston who made a translation of the 
Greek inscription, which he read in a paper delivered before the London Society of Anitquaries, 
in April 1802. 

In 1818 Dr. Thomas Yoimg, the physicist who first proposed the wave theory of light, com- 
piled for the 4th volume of Encyclopaedia Britannica, published in 1819, the results of his 
studies on the Rosetta Stone and among them there was a list of several Egyptian characters 
to which, in most cases, he had assigned correct phonetic values. He was the first to grasp the 
idea of a phonetic principle in the Egyptian hieroglyphs and he was the first to apply it to their de- 
cipherment. He also proved something which others had only suspected, namely, that the 
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hieroglyphs in ovals or cartouches were royal names. But Young’s name is not associated in 
the public mind with the decipherment of Egyptian hieroglyphics — that of Champollion is 
very much so. Yet much of what Champollion did was based upon Young’s work. Perhaps 
the greatest credit should go to Champollion for recognizing the major importance of an ancient 
language known as Coptic as a bridge that could lead to the decipherment of the Egyptian 
hieroglyphics. As a lad of seven he’d made up his mind that he’d solve the hieroglyphic 
writing, and in the early years of the 19th Century he began to study Coptic. In his studies 
of the Rosetta Stone his knowledge of Coptic, a language the knowledge of which had never 
been lost, enabled him to deduce the phonetic value of many syllabic signs and to assign cor- 
rect readings to many pictorial characters, the meanings of which became known to him from 
the Greek text on the Stone. 
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The following step-by-step account of the solution is taken from a little brochure entitled 
The Rosetta Stone, published by the Trustees of the British Museum. It was written in 1922 
by E. A. Wallis Budge and was revised in 1950. I quote: 

“The method by which the greater part of the Egyptian alphabet was recovered is this: It 
was assumed correctly that oval ( l l , or “cartouche” as it is called, alwajrs contained a 
royal name. There is only one cartouche (repeated six times with ^ght modifications) on the 
Rosetta Stone, and this was assumed to contain the name of Ptolemy, because it was certain 
from the Greek text that the inscription concerned a Ptolemy. It was also assumed that if 
the cartouche did contain the name of Ptolemy, the characters in it would have the sounds of 
the Greek letters, and that aU together they would represent the Greek form of the name of 
Ptolemy. Now on the obelisk which a certain Mr. Banks had brought from Philae there was 
also an inscription in two languages, Egyptian and Greek. In the Greek portion of it two 
royal names are mentioned, that is to say, Ptolemy and Cleopatra, and on the second face of 
the obelisk there are two cartouches, which occur dose together, and are filled with hieroglyphs 
which, it was assumed, formed the Eg 3 qitian equivalents of these names. When these car- 
touches were compared with the cartoudie on the Rosetta Stone it was found that one of them 
contained hieroglyphic characters that were almost identical with those which filled the car- 
toudie on the i^setta Stone. Thus there was good reason to believe that the cartouche on 
the Rosetta Stone contained the name of Ptolemy written in hieroglyphic characters. The 
forms of the cartoudies are as follows: 



On the Rosetta Stone: — 






] 



On the Obelisk from Philae: — 









in the second of these cartoudies a single sign takes the place of three signs at the end of the 
first cartoudie. Now it has already been said that the name of Cleopatra was found in Gredr 
on the Philae Obdidr, and the cartoudie whidi was assumed to contain the Egyptian equiva- 
lent to this name appears in this form: 



Taking the cartouches whidi were supposed to contain the names of Ptolemy and Cleopatra 
from the Philae Obdidc, and numbering the signs we have: 



Ptolemy, A. 






.2a&i 






10 . 
A 



11.12 
D ^ 13 



3 



Cleopatra, B. ( ii ) 

Now we see at a glance that No. 1 in A and No. 5 in B are identical, and judging only by their 
position in the names they must represent the letter P. No. 4* in A and No. 2 in B are identi- 
cal, and arguing as before from their position, they must represent the letter L. As L is the 
second letter in the name of Cleopatra, sign No. 1 in B must represent K. In the cartouche of 
Cleopatra, we now know the values of Signs Nos. 1, 2 and 6, so we may write them down thus: 

( » ■- -l| ^ "g 1 

In the Greek form of the name of Cleopatra there are two vowds between the L and P, and 
in the hieroglyphic form there are two hieroglyphs, this 1) and this ^ , so we may assume 
that the first is E and the other O. In some forms of the cartouche of Cleopatra, No. 7 (the 
hand) is replaced by a half drde, which is identical with No. 2 in A and No. 10 in B. As T 
follows P in the name Ptolemy, and as there is a T in the Greek form of the name of Cleopatra, 
we may assume that the half circle and the hand have substantially the same sound, and that 
that sound is T. In the Greek form of the name Cleopatra there are two A’s, the position of 
which agree with No. 6 and No. 9, and we may assume that the bird has the value of A. Sub- 
stituting these values for the hieroglyphs in B we may write it thus: 
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K L E O P A T 



A ^ 



■n> 



Thomas Young noticed that the two signs and O always followed the name of a goddess, or 
queen, or princess. Other early decipherers regarded the two signs as a mere feminine termina- 
tion. The only sign for which we have no phonetic equivalent is No. 8, the lens, and it is obvious 
that this must represent R. Insertiag this value in the cartouche we have the name Cleo- 
patra deciphered. Applying now the values which we have learned from the cartouche of Cleo- 
patra to the cartouche of Ptolemy, we may write it thus: 



c 



P T o L 



,|1 .f 



10 T 



P T 






We now see that the cartouche must be that of Ptolemy, but it is also clear that there must be 
contained in it many other hieroglyphs which do not form part of his name. Other forms of 
the cartouche of Ptolemy are found, even on the stone, the simplest of them written thus: 



CMIEI 

It was therefore evident that these other signs 



lA 11.12 
A □ O 13 



were royal titles corre- 



sponding to those found in the Greek text on the Rosetta Stone meaning “ever-living, beloved 
of Ptah.” Now the Greek form of the name Ptolemy, i.e. Ptolemaios, ends with S. We may 
assume therefore that the last signC in the simplest form of the cartouche given above has the 
phonetic value of S. The only hieroglyphs now doubtful are and ^ ^ , and their posi- 
tion in the name of Ptolemy suggests that their phonetic values must be M and some vowel 
soimd in which the I sound predominates. These values, which were arrived at by guessing 
and deduction, were applied by the early decipherers to other cartouches, e.g.: 

Now in No. 1, we can at once write down the values of aH the signs, viz., P. I. L. A. T. R. 
A., which is obviously the Greek name Philotera. In No. 2 we know only some of the hier- 
oglyphs, and we write the cartouche thus: 

^ A L S ^ T R 

It was known that the running-water sign /wwia occurs in the name Berenice, and that it rep- 
resents N, and that this sign — h — is the last word of the transcript of the Greek title “Kai- 
saros,” and therefore represent some S sound. Some of the forms of the cartouche of Cleo- 
patra begin with C^^), and it is clear that its phonetic value must be K. Inserting these 
values in the cartouche above we have: 



•HISSES 



3 








f A L K S ( 


N T R S 
/ 



which is clearly meant to represent the name “Alexandres,” or Alexander. The position of 
this sign (/] ) shows that it represented some sound of E or A. 

Well, I’ve showed you enough to make &irly clear what the problem was and how it was 
solved. As you may already have gathered, the cryptanalysis was of a very simple variety. 

The grammar? — Well, that’s an entirely different story: There’s where the difficult part 
lay. It was very fortunate that the first attacks on Egyptian hieroglyphics didn’t have to 
deal with enciphered writing. Yes, the Egyptians also used cryptography; yes, there are 
“cryptographic hieroglyphics!” We’ll get to these later, but at this point it may be of interest 
to many of you to learn something about what the Rosetta Stone had to say, as set forth by 
Dr. Budge: 



“The opening lines are filled with a list of the titles of Ptolemy V, and a series of epithets which 
prodaim the king’s piely towards the gods, and his love for the Egyptians and his country. In 
the second section of the inscriplaon the priests enumerate the benefits whidi he had conferred 
upon Egypt, and which may he thus summarized; 

1. Gifts of money and com to the temples. 

2. Gifts of endowments to temples. 
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3. Remission of taxes due to the Crown. 

4. Forgiveness of debts owed by the people to the Crown. 



7. Reduction of fees payable by candidates for the priesthood. 

8. Reduction of the dues payable by the temples to the Crown. 



13. Forgiveness of the debts owed by the priests to the Crown. 

14. Reduction of the tax on byssus (a kind of flax or cotton flbre). 

15. Reduction of the tax on com lands. 
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Figure 506. 



Could it be that installment-plan buying was rampant in Ancient Eg 3 rpt too, so that people 
didn’t have enough left to pay their taxes? 

Now, let’s go back to those cryptographic hieroglyphics mentioned a moment ago. Here, 
in Fig. 50a for instance, is a picture of an inscription on a stela now in the Louvre, in Paris. 
Lines 6-10, inclusive, below the seated figures under the arch, contain secret writing in hier- 
oglyphics; in Fig. 506, these lines are seen enlarged. I won’t attempt to explain the nature- of 
the crsrptography involved. It’s pretty simple — something like the sort of cryptography in- 
volved in our own type of rebuses, and in our modem acronymic abbreviations, such as CARE, 
which stands for Cooperative (for) American Relief Everywhere, or NASA, for the National 
Aeronautics (and) Space Administration. 

The following extracts, translated from a long article by Prof, l^enne Drioton in “Revue 
D’figyptologie,’’ Paris, 1933, will be of interest (p. 1): 

“From the time of the Middle Empire onwards, Egypt had, alongside the official and normal 
system of writing, a tradition of cryptographic writing, the oldest known examples of which are 
to be found in the tombs of Beni-Hassan, and the most recent in the inscriptions of the temples 
of the Greco-Roman epoch. 

«*««*** 

(P. 32): 

It is necessary to add to the enumeration of the cryptographic procedures the variation in the 
appearance of the cryptographic signs themselves .... This variation, without however affect- 
ing their value, can (1) modify the appearance of the signs; (2) affect their position in various 
ways; and (3) combine these signs with others. . . . Finally, to note a last peculiarity of these 
inscriptions which, because of their fine form, deserve to be considered the classics of the cryptog- 
raphy of this 'period, the scribe has several times successfully carried out in them what was 
doubtless considered to be the triumph of the genre: the grouping of signs which offer a possible 
but fallacious meaning in clear, alongside a cryptographic meaning which is the only true one.” 



And now for the most intriguing explanation offered by Drioton as to why cryptography was 
incorporated in these inscriptions. You know quite well why cryptography is employed in 
military, diplomatic, banking, and industrial affairs; you also know perhaps that it is used for 
other purposes, in love affairs, for example, and in illicit enterprises of all sorts; and you prob- 
ably also know that it is often used for piurposes of amusement and diversion, in tales of mys- 
tery, in the sorts of things published in newspapers and literary journals — ^they are called 
“crypts.” But none of these explanations wiU do for the employment of cryptography in 
Egyptian hieroglyphics. Here’s what Drioton thinks: 
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(p. 50): 

“There remains, therefore, the supposition that, far from seeking to prevent reading, the 
cryptography in certain passages of these inscriptions was intended to encourage their reading. 

The appeals which often introduce formulae of this type, and which are addressed to all visi- 
tors to the tombs, show in fact how much the Egyptians desired to have them read, but also, by 
the very fact of their existence, what an obstacle they encountered in the indifference, not to say 
satiety, produced by the repetition and the monotony of these formulae. To attempt to over- 
come this indifference by offering a text whose appearance would pique curiosity, based on the 
love, traditional in Egypt, for puzzles, to get people to decipher, with great difficulty, what was 
desired they should read, such is perhaps, in last analysis, the reason why the three monuments 
of the period of Amenophis III here considered present certain passages in cryptography. 

One must suppose, in this case, that the goal was not attained and that it was very quickly 
seen that the expedient produced, on the apathy of the visitors, an effect opposite to that in- 
tended: it removed even the lightest desire to read the inscriptions presented in this form. The 
new procedure was therefore — the monuments seem to prove it — abandoned as soon as it had 
been tried.” 

******* 

Before leaving the story of ChampoUion’s mastery of Egyptian hieroglyphic writing, I think 
I should re-enact for you as best I can in words what he did when he Mt he’d really reached 
the solution to the mystery. I’ll preface it by recalling to you what Archimedes is alleged to 
have done when he solved a problem he’d been struggling with for some time. Archimedes 
was enjosdng the pleasures of his bath and was just stepping out of the pool when the solution 
of the problem came to him like a flash. He was so overjoyed that he ran, naked, through the 
streets shouting “Eureka! I’ve found it, I’ve found it.” Well, likewise, when young Cham- 
poUion one day had concluded he’d solved the mystery of the Egyptian heiroglyphics, he set 
out on a quick nule-run to the building where his lawyer brother worked, stumbled into his 
brother’s office, shouting “Eugene, I did it!”, and flopped down to the floor in a trance where 
he is said to have remained immobile and completely out for five days. “ChampoUion died 
on 4 March 1832, leaving behind the manuscript of an Egyptian Grammar and of a Hierogly- 
phic Dictionary which, except for some errors of details inevitable in a gigantic work of de- 
cipherment and easily correctable, form the basis of the entire science of Egyptology.”* 

I shouldn’t leave this brief story of the cryptanalytic phases of the solution of the Egyptian 
hieroglyphic writing without telling you that there remain plenty of other sorts of writings 
which some of you may want to try your hand at deciphering when you’ve learned some of the 
principles and procedures of the science of cryptology. A list of thus-far undeciphered writ- 
ings was drawn up for me by Professor Alan C. Ross, of London University, in 1945, and had 
19 of them. Since 1945 only two have been deciphered, Minoan Linear A and Linear B writ- 
ing. The Easter Island writing is said to have very recently been solved, but I’m not sure of 
that. There are some, maybe just a very few, who think the hieroglsrphic writing of the 
ancient Maya Indians of Central America may fall soon, but don’t be too sanguine about that 
either. 

Should any of you be persuaded to tackle any of the still undeciphered writings in the list 
drawn up by Professor Ross, be sure you have an authentic case of an undeciphered language 
before you. Figure 16 is one that was written on a parchment known as the Michigan Pa- 
pyrus. It had baffied certain savants who had a knowledge of Egyptology and attempted to 
read it on the theory that it was some sort of variation — a much later modification — of Egyp- 
tian hierogl 3 q>hic writing. These old chaps gave it up as a bad job. Not too many years ago, 
it came to the attention of a young man who knew very little about Egyptian hieroglyphics. 
He saw it only as a simple substitution cipher on some old language. He tackled the Michi- 
gan Papyrus on that basis and eolved it. He found the language to be early Greek. And 
what was the purport of the writing? Well, it was a wonderfid old Greek beautician’s secret 
formula for further beauti^ng lovely Greek young women — ^maybe the bathing beauties of 
those days, among whom possibly were “Miss Greece of 500 B. C.” and “Miss Universe” of 
those days! 

‘ Drioton, “Decipherment of Egyptian Hieroglyphics” La Science Modeme, August 1924, pp. 423-432. 
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Figure 51. 



The next period of importance in this brief account of the history of cryptology is the one 
which deals with the codes and ciphers used by the contestants in our Civil War, the period 
1861-65. It is significant and important because, for the first time in history, rapid and secure 
communications on a large scale became practicable in the conduct of organized warfare and 
world-wide diplomacy. They became practicable when cryptology and telegraphy were joined 
in happy, sometimes contentious, but long-lasting wedlock. 

There is one person I should mention, however, before coming to the period of the Civil War 
in U. S. history. I refer here to Edgar Allan Poe, who in 1842 or thereabouts, kindled an in- 
terest in cryptography in newspapers and journals of the period, both at home and abroad. 
For his day he was certainly the best informed person in this country on cnyptologic matters 
outside of the regular employees of Government departments interested in the subject. 

In regard to Poe, one of our early columnists, there’s an incident I’d like to teU you about 
in connection with a challenge he printed in one of his columns, in which he offered to solve any 
cipher submitted by his readers. He placed some limitations on his challenge, which amounted 
to this — that the challenge messages should involve but a single alphabet. In a later artidb 
Poe tells about the numerous challenge messages sent him and says: “Out of perhaps 100 

ciphers altogether received, there was only one which we did not immediately succeed in re- 
solving. TUs one we demonstrated to be an imposition — that is to say, we fully proved it a 
jargon of random characters, having no meaning whatever.’’ I wish that cipher had been 
preserved for posterity, because it would be interesting to see what there was about it that 
warranted Poe to state that “we fully proved it a jargon of random characters.” Maybe I’m 
not warranted in sasdng of this episode that Poe reminds me of a ditty sung by a character in 
a play put on by some undergraduates of one of the colleges of Cambridge University, in Eng- 
land. At a certain point in the play, this character steps to the front of the stage and sings: 

“I am the Master of the College, 

What I don’t know ain’t knowledge.” 
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Thus, Poe. What he couldn’t solve, he assumed wasn’t a real cipher — a very easy out for any 
cryptologist up against something tough. 

If any of you are interested sufGlciently to wish to learn something about Poe’s contributions 
to cryptology, I refer you to a very fine article by Professor W. K. Wimsatt, Jr., entitled “What 
Poe Knew About Cryptography,” Publications of the Modem Language Association of Amer- 
ica, New York, Vol. LVIII, No. 3, September 1943, pp 754-79. In it you’U find references to 
what I have published on the same subject. 

This completes the third lecture in this series. In the next one we shall come to that inter- 
esting period in cryptologic history in which codes and ciphers were used in this country in the 
War of the Rebellion, the War Between the States, the Civil War — you use your own pet 
designation for that terrible and costly struggle. 
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Lecture IV 

A detailed account of the codes and ciphers of the Civil War in the United States of America 
can hardly be told without beginning with a bit of biography about the man who became the 
first signal officer in history and the first Chief Signal Officer of the United States Army, Albert 
J. Myer, the man in whose memory that lovely little U. S. Army post adjacent to Arlington 
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Figure S2. 

Cemetery was named. Myer was born on 20 September 1827, and after an apprenticeship in 
the then quite new science of electric telegraphy he entered Hobart College, Geneva, New York, 
from which he was graduated in 1847. From early youth he had exhibited a predilection for 
artistic and scientific studies, and upon leaving Hobart he entered Buffalo Medical College, re- 
ceiving the M.D. degree foiur years later. His graduation thesis, “A Sign Language for Deaf 
Mutes,” contained the germ of the idea he was to develop several years later, when, in 1854, 
he was commissioned a 1st Lieutenant in the Regular Army, made an Assistant Surgeon, and 
ordered to New Mexico for duty. He had plenty of time at this far away outpost to think 
about developing an efficient system of military “aerial telegraphy,” which was what visual 
sig nnliTig was then called. I emphasize the word “system” because, strange to say, although 
instances of the use of lights and other visual signals can be found throughout the history of 
warfare, and their use between ships at sea had been practiced by mariners for centuries, yet 
down to the middle of the 19th Century surprisingly little progress had been made in develop- 
ing methods and instruments for the systematic exchange of military information and instruc- 
tions by means of signals of any kind. Morse’s practical system of electric telegraphy, de- 
veloped in the years 1832-35, served to focus attention within the military upon systems and 
methods of intercommunication by means of both visual and electrical signals. In the years 
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inimediatdy preceding the Civil War, the U. S. Army took steps to introduce and to develop 
a system of visual signaling for general use in the field. It was Assistant Surgeon Myer who 
furnished the initiative in this matter. 

In 1856, two years after he was commissioned assistant surgeon, Myer drafted a memoran- 
dum on a new system of visual signaling and obtained a patent on it. Two years later, a 
board was appointed by the War Department to study Myer’s system. It is interesting to 
note that one of the officers who served as an assistant to Myer in demonstrating his system 
before the board was a Lieutenant E. P. Alexander, Corps of Engineers. We shall hear more 
about hinri presently, but at the moment I will say that on the outbreak of war, Alexander 
organized the Confederate Signal Corps. After some successful demonstrations by Myer and 
his assistants, the War Department fostered a bill in Congress, which gave its approval to his 
ideas. But what is more to the point. Congress appropriated an initial amount of $2,000 to 
enable the Army and the War Department to develop the system. The money, as stated in 
the Act was to be used “for manufacture or purchase of apparatus and equipment for field 
signaling.” The act also contained another important provision: it authorized the appointment, 
on the Army staff, of one Signal Officer with the rank, pay, and allowances of a major of cav- 
alry. On 2 July 1860, “Assistant Surgeon Albert J. Myer (was appointed) to be Signal Offi- 
cer, with the rank of Major, 27 June 1860, to fill an original vacancy,” and two weeks later 
Major Myer was ordered to report to the Commanding General of the Department of New 
Mexico for signaling duty. The War Department also directed that two officers be detailed 
as his assistants. During a several months’ campaign against hostile Navajos, an extensive 
test of Myer’s new system, usiag both flags and torches, was conducted with much success. 
In October 1860, a Lieutenant J. E. B. Stuart, later to become famous as a Confederate cav- 
alry leader, tendered his services to aid in signal instruction. 

Less than a year after Major Myer was appointed as the first and, at that time, the only 
Signal Officer of the U. S. Army, Fort Sumter was attacked and, after a 36-hour bombardment, 
surrendered. The bloody four-year war between riie North and the South began. The date 
was 14 April 1861. Myer’s system of aerial telegraphy was soon to undergo its real baptism 
under fire, rather than by fire. But with the outbreak of war, another new system of military 
signal communication, signaling by the electric telegraph, began to undergo its first thorough 
test in combat operations. This in itself is very important in the history of cryptology. But 
far more significant in that history is a fact that I mentioned at the close of the last lecture, 
viz, that for the first time in the conduct of organized warfare, rapid and secret military com- 
munications on a large scale became practicable, because cryptology and electric telegraphy were 
now to be joined in a lasting wedlock. For when the war began, the electric telegraph had 
been in use for less than a quarter of a century. Although the first use of electric telegraphy in 
military operations was in the Crimean War in Ehurope (1854-56), its employment was re- 
stricted to communications exchanged among headquarters of the Allies, and some observers 
were very doubtful about its utility even for this limited usage. It may also be noted that in 
the flrmala of that war there is no record of the employment of electric telegraphy together with 
Ttieana for protecting the messages against their interception and solution by the enemy. 

On the Union side in the Civil War, military signal operations began with Major Myer’s 
arrival in Washington on 3 June 1861. His basic equipment consisted of Mts containing a 
white flag with a red square in the center for use against a dark background; a red flag with a 
white square for use against a light backgroxmd; and torches for night use. It is interesting 
to note that these are the elements which make up the familiar insignia of our Army Signal 
Corps. The most pressing need which faced Major Myer was to get officers and men detailed 
to him wherever aignala mi ght be required, and to train them in what had come to be called 
the “wigwag system,”^ the motions of which are depicted in Fig. 53. This training included 
learning something about codes and ciphers and gaining experience in their usages. 



^ And, of course, the G. I.’s of those days had a pet name for the users of the system. They called them 
“flag floppers.” 
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But there was still no such separate entity as a Signal Corps of the Army. Officers and en- 
listed men were merely detailed for service with Major Myer for signaling duty. It was not 
until two years after the war started that the Signal Corps was officially established and or- 
ganized as a separate branch of the Army, by appropriate Congressional action. 

In the meantime, another signaling organization was coming into being — an organization 
which was an outgrowth of the government’s taking over control of the commercial telegraph 
companies in the United States on 25 February 1862. There were then only three in number: 
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Figure 53. 
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the American, the Western Union, and the Southwestern. The telegraph lines generally fol- 
lowed the right-of-way of the railroads. The then Secretary of War, Simon Cameron, sought 
the aid of Thomas A. Scott, of the Pennsylvania Railroad, who brought some of his men to 
Washington for railroad and telegraphic duties with the Federal Government. From a nucleus 
of fom: yoimg telegraph operators grew a rather large military telegraph organization which 
was not given formal status until on 28 October 1861 President Lincoln gave Secretary Cam- 
eron authority to set up a “U. S. Military Telegraph Department” imder a man named Anson 
Stager, who, as general superintendent of the Western Union, was called to Washington, com- 
missioned a captain (later a colonel) in the Quartermaster Corps, and made superintendent of 
the Military Telegraph Department. Only about a dozen of the members of the Department 
became commissioned officers, and they were made officers so that they could receive and dis- 
burse funds and property; all the rest were civilians. The U. S. Military Telegraph “Corps,” 
as it soon came to be designated, without warrant, was technically under Quartermaster Gen- 
eral Meigs, but for all practical purposes it was under the immediate and direct control of the 
Secretary of War, a situation admittedly acceptable to Meigs. There were now two organ- 
izations for signaling in the Army, and it was hardly to be expected that no difficulties would 
ensue from the duality. In fact, the difficulties began very soon, as can be noted in the fol- 
lowing extract from a lecture before the Washington Civil War Round Table, early in 1954, 
by Dr. George R. Thompson, Chief of the Historical Division of the Office of the Chief Signal 
Officer of the U. S. Army: 

The first need for military signals arose at the important Federal fortress in the lower Chesa- 
peake Bay at Fort Monroe. Early in June, Myer arrived there, obtained a detail of officers and 
men and began schooling them. Soon his pupils were wig-wagging messages from a small boat, 
directing fire of Union batteries located on an islet in Hampton Roads against Confederate fort- 
ifications near Norfolk. Very soon, too, Myer began encountering trouble with commercial 
wire telegraphers in the area. General Ben Butler, commanding the Federal Department in 
southeast Virginia, ordered that wire telegraph facilities and their civilian workers be placed un- 
der the signal officer. The civilians, proud and jealous of their skills in dectrical magic, objected 
in no uncertain terms and shortly an order arrived from the Secretary of War himself who counter- 
manded Butler’s instructions. The Army signal officer was to keep hands off the civilian tele- 
graph even when it served the Army. 

I have purposely selected this extract from Dr. Thompson’s presentation because in it we 
can clearly hear the first rumblings of that lengthy and acrimonious feud between two signaling 
organizations whose uncoordinated operations and rivalry greatly reduced the efficiency of all 
signaling operations of the Federal Army. As already indicated, one of these organizations 
was the U. S. Military Telegraph “Corps,” hereinafter abbreviated as the USMTC, a civilian 
organization which operated the existing commercial telegraph systems for the War Depeirt- 
ment, under the direct supervision of the Secretary of War, Edwin M. Stanton. The other 
organization was, of course, the infant Signal Corps of the United States Army, which was not 
yet even established as a separate Branch, whereas the USMTC had been established in October 
1861, as noted above. Indeed, the Signal Corps had to wait until March 1863, two years after 
the outbreak of war, before being established officially. In this coimection it should be noted 
that the Confederate Signal Corps had been established a full year earlier, in April 1862. Un- 
til then, as I’ve said before, for signaling duty on both sides, there were only officers who were 
individually and specifically detailed for such duty from other branches of the respective 
Armies of the North and the South. Trouble between the USMTC and the Signal Corps of 
the Union Army began when the Signal Corps became interested in signaling by electric teleg- 
raphy and began to acquire facilities therefor. 

As early as in June 1861, Chief Signal Officer Myer had initiated action toward acquiring or 
obtaining electrical telegraph facilities for use in the field, but with one exception nothing 
happened. The exception was in the case of the episode in the military department in south- 
east Virginia, commanded by General Benjamin Butler, an episode that clearly foreshadowed 
the future road for the Signal Corps in regard to electrical signaling: the road was to be closed 
and barred. In August 1861, Colonel Myer tried again and in November of the same year he 
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Fecominended in his annual report that $30,000 be appropriated to establish an electric signal- 
ing branch in the Signal Corps. The proposal failed to meet the approval of the Secretary of 
War. One telegraph train, however, which had been ordered by Myer many months before, 
was delivered in January 1862. The train was tried out in an experimental fashion, and under 
considerable difficulties, the most disheartening of which was the active opposition of persons 
in Washington, particularly the Secretary of War. So, for practically the whole of the first 
two years of the war, signal officers on the Northern side had neither electrical telegraph facil- 
ities nor Morse operators — they had to rely entirely on the wig-wag system. However, by 
the middle of 1863 there were thirty “flying telegraph” trains in use in the Federal Army. 
Here’s a picture of such a train. The normal length of field telegraph lines was five to eight 
miles, though in some cases the instruments had worked at distances as great as twenty miles. 
But even before the Signal Corps began to acquire these facilities, there had been agitation to 
have them, as well as their Signal Corps operating personnel, all turned over to the USMTC, 
which had grown into a tightly knit organization of over 1,000 men and had become very in- 
fluential in Washington, especially by virtue of its support from Secretary of War Stanton. 
As a consequence, the USMTC had its way. In the fall of 1863, it took over all the electric 
telegraph facilities and telegraph operators of the Signal Corps. Colonel Myer sadly wrote: 
“With the loss of its electric lines the Signal Corps was crippled.” 




A drawing from Myer’s Mantud of Sigtuds illustrating the field, or flying, telegraph. It shows 
the ivagon with batteries and instruments. The wire (in this case presumably hare reaper, 
since it is being strung on insulators on poles) is being run out from a reel carried by two men. 
The linesmen are using a crowbar to open heJes to receive the lance poles. Myer estimated that 
2Vi miles of such wire line could be put up in an hour. 



Figure 54. 

So now there were two competing signal organizations on the Northern side: The U. S. 
Army’s Signal Coin’s, which was composed entirely of military personnel with no electric tele- 
graph facilities (but was equipped vnth means for visual signaling), and the USMTC, which 
was not a part of the Army, being staffed almost entirely witii civilians, and which had electric 
telegraph facilities and skilled Morse operators (but no means or responsibilities for visual sig- 
naling or “aerial telegraphy” which, of course, was old stuff). “Electric telegraphy” was now 
the thing. The USMTC had no desire to share electric telegraphy with the Signal Corps, a 
determination in which it was most ably assisted by Secretary of War Stanton, for reasons that 
fall outside the scope of the present lecture. 
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However, from a technical point of view it is worth going into this rivalry just a bit, if only 
to note that the personnel of both organizations, the military and the civilian, were not merely 
signalmen and telegraph operators: they served also as cayptographers and were therefore en- 
trusted with the necessary cipher books and cipher keys. Because of this, they naturally 
became privy to the important secrets conveyed in cryptographic communications and they 
therefore enjoyed status as VIP’s. This was particularly true of members of the USMTC, 
because they, and only they, were authorized to be custodians and users of the cipher books. 
Not even the conunanders of the units they served had access to them. For instance, on the 
one and only occasion when General Grant forced his cipher operator, a civilian named Beck- 
with, to turn over the current cipher book to a colonel on Grant’s staff, Beckwith was im- 
mediately discharged by the Secretary of War and Grant was reprimanded. A few dasrs later, 
Grant apologized and Beckwith was restored to his position. But Grant never again de- 
manded the cipher book held by his telegraph operator. 

The Grant-Beckwith affair alone is sufficient to indicate the lengths to which Secretary of 
War Stanton went to retain control over the USMTC, including its cipher operators, and its 
cipher books. In fact, so strong a position did he take that on 10 November 1863, following a 
disagreement over who should operate and control all the military telegraph lines, Myer, by 
then full Colonel, and bearing the imposing title “Chief Signal Officer of the United States 
Army,” a title he had enjoyed for only two months, was peremptorily relieved from that posi- 
tion and put on the shelf. Not long afterward, and for a similar reason, Myer’s successor. 
Lieutenant Colonel Nicodemus, was likewise summarily relieved as Chief Signal Officer by 
Secretary Stanton; indeed, he was not only removed from that position — ^he was “dismissed from 
the Service.” Stanton gave “phoney” reasons for dismissing Colonel Nicodemus, but I am 
glad to say that the latter was restored his commission in March 1865, by direction of the 
President; also by direction of the President, Colonel Myer was restored to his position as 
Chief Signal Officer of the U. S. Army on 25 February 1867. 

When Colonel Myer was relieved from duty as Chief Signal Officer in November 1863, he 
was ordered to Cairo, Illinois, to await orders for a new assignment. Very soon thereafter he 
was either designated (or he may have himself decided) to prepare a field manual on signaling 
and there soon appeared, with a prefatory note dated January 1864, a pamphlet of 148 pages, 
a copy of which is now in the Rare Book Room of the Library of Congress. The title page reads 
as follows: 

“A Maniutl of Signals: for the use of signal officers in the fidd. By Col. Albert J. Myer, Signal 

Officer of the Army, Washington, D. C., 1864.” 

Even in this first edition, printed on an Army press, Myer devoted nine pages to a reprint of 
an article from Harper’s Weekly entitled “Curiosities of Cipher,” and in the second edition, 
1866, he expanded the section on cryptography to sixty pages. More editions followed and I 
think we may well say that Myer’s Manual, in its several editions, was the pioneer American 
text on military signaling. But I’m sorry to say that as regards cryptology it was rather a 
poor thing. Poe had done better twenty years before that in his essay entitled “A few words 
on secret writing.” 

Because of its historic nature, you may like to see what Myer’s original “wig-wag code” was 
like. It was called “a two-element code” because it employed only two digits, 1 and 2, in 
permutations of 1, 2, 3 and 4 groups. For example, A was represented by the permutation 
22; B, by 2122; and C, by 121, etc. In flag signaling, a “1” was indicated by a motion to the 
left, and a “2” by a motion to the right. Later these motions were reversed, for reasons which 
must have been good but are now not obvious. Here is Myer’s two-element code which con- 
tinued to be used until 1912: 



- This reversal can be seen in Fig. 53. 
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A - 


22 


M 


- 


1221 


Y - 111 




B - 


2122 


N 


- 


11 


Z - 2222 




C - 


121 


O 


- 


21 


& - 1111 




D - 


222 


P 


- 


1212 


iug - 2212 




E - 


12 


Q 


- 


1211 


tion - 1112 




F - 


2221 


R 


- 


211 






G - 


2211 


S 


- 


212 


End of word 


- 3 


H - 


122 


T 


- 


2 


End of sentence 


- 33 


I - 


1 


U 


- 


112 


End of message 


- 333 


J - 


1122 


V 


- 


1222 


AfiSrmative 


- 22.22.22.3 


K - 


2121 


W 


- 


1121 


Repeat 


- 121.121.121 


L - 


221 


X 


- 


2122 


Error 


- 212121 



Note: No. 3 (end of word) was made by a forward downward motion, called “front.” 

There were about a dozen more signals, for numerals, for frequently used short 
sentences, etc. 

We must turn our attention now to the situation as regards the organization for signaling 
in the Confederate Army. It is of considerable interest to note that in the first great engage- 
ment of the War, that of the first Bull Run battle, the Confederate Signal Officer was that 
young Lieutenant, E. P. Alexander, who had assisted in demonstrating the wig-wag system 
before a board appointed by the War Department to study Myer’s system. Alexander, now 
a Captain in grey, used Myer’s system during the battle, which ended in disaster for the Union 
forces: and it is said that Alexander’s contribution by effective signaling was an important 
factor in the Confederate victory. Dr. Thompson, whom I have quoted before, says of this 
battle: 

“Thus the fortunes of war in this battle saw Myer’s system of signals succeed, ironically, on the 
side hostile to Myer. Because of general unpreparedness and also some disinterest and igpio- 
rance, the North had neither wig-wag signals nor balloon observations.” 

The only communication system which succeeded in signal work for the Union Army was 
the infant USMTC. But the Confederate system under Alexander, off to a good start at 
Bull Run, throughout the war operated with both visual and electric telegraphy, and the Con- 
federates thought highly enough of their signal service to establish it on an official basis, on 19 
April 1862, less than a year after that battle. Thus, although the Confederate Signal Corps 
never became a distinct and independent branch of the Army as did the Union Signal Corps, 
it received much earlier recognition from the Confederate Government than did the Signal 
Corps of the Federal Govenunent. Again quoting Dr. Thompson: 

“The Confederate Signal Corps was thus established nearly a year earlier than its Federal coun- 
terpart. It was nearly as large, numbering some 1,500, most of the number, however, serving 
on detail. The Confederate Signal Corps used Myer’s system of flags and torches. The men 
were trained in wire telegraph, too, and impressed wire facilities as needed. But there was noth- 
ing in Richmond or in the field comparable to the extensive and tightly controlled civilian mili- 
tary telegraph organization which Secretary Stanton ruled with an iron hand from Washington.” 

We come now to the codes and ciphers used by both sides in the war, and in doing so we must 
take into consideration the fact that on the Union side, there were, as I have indicated, two 
separate organizations for signal communications; one for visual signaling, the other for electric. 
We should therefore not be too astonished to find that the cryptosystems used by the two 
competing organizations were different. On the other hand, on the Confederate side, as just 
noted, there was only one organization for signal communications, the Signal Coips of the 
Confederate States Army, which used both visual and electric telegraphy, the latter facilities 
being taken over and employed when and where they were available. There were reasons for 
this marked difference between the way in which the Union and the Confederate signal op- 
erations were organized and administered but 1 do not wish to go into them now. One reason, 
strange to say, had to do with the difference between the cryptocommunication arrangements 
in the Union and in the Confederate Armies. 
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We will discuss the cryptosystems used by the Federal Signal Corps first and then those of 
the Confederate Signal Corps. Since both corps used visual signals as their primary means, 
we find them employing Myer’s visual-signaling code shown above. At first both sides sent 
unenciphered messages; but soon after learning that their signals were being intercepted and 
were being read by the enemy, each side decided to do something to protect its messages. 
Initially both decided on the same artifice, viz, changing the visual-signaling equivalents for 
the letters of the alphabet, so that, for instance, “22” was not always “A”, etc. This sort of 
changing-about of values soon became impractical, since it prevented memorizing the wig-wag 
equivalents once and for all. The difficulty in the Union Army’s Signal Corps was solved by 
the introduction into usage of a cipher disk invented by Myer himself. A ftiU description of 
the disk in its various embodiments will be found in Myer’s Manual, but here’s a picture of 
three forms of it. You can see how readily the visual wig-wag equivalents for letters, figures, 
etc., can be changed according to some pre-arranged indicator for juxtaposing concentric disks. 
In my Fig. 55 the top left disks (Fig. 1 of Myer’s Plate XXVI) show that the letter A is rep- 
resented by 112, B, by 22, etc. By moving the two circles to a different juxtaposition a new 
set of equivalents will he established. Of comse, if the setting is kept fixed for a whole mes- 
sage the encipherment is strictly monoalphabetic; but Myer recommends changing the setting 
in the middle of the message or, more specifically, at the end of each word, thus producing a 
sort of polyalphabetic cipher which would delay solution a bit. An alternative way, Myer 
states, would be to use what he called a “coimtersign word,” but which we caU a ^ uxtrd, 
each letter of which would determine the setting of the disk or for a single word or for two con- 
secutive words, etc. Myer apparently did not realize that retaining or showing externally, that 
is, in the cipher text, the lengths of the words of the plain text very seriously impairs the se- 
curity of the cipher message. A bit later we shall discuss the security afforded by the Myer 
disk in actual practice. 

In the Confederate Signal Corps, the system used for encipherment of visual signals was 
apparently the same as that used for enciphering telegraphic messages, and we shall soon see 
what it was. Although Myer’s cipher disk was captured a number of times, it was appsuently 
disdained by the Confederates, who preferred to use a wholly different type of device, as will 
be described presently, for both visual and electric telegraphy. 

So much for the cryptosystems used in connection with visual signals by the Signal Corps 
of both the North and the South, systems which we may designate as “tactical ciphers.” We 
come now to the systems used for what we may call “strategic ciphers,” because the latter 
were usually exchanged between the seat of Goverzunent and field commanders, or among the 
latter. In the case of these communications the cryptosystems employed by each side were 
quite different. 

On the Northern side the USMTC used a system based upon what we now caU transposition 
but in contemporary accounts they were caUed “route ciphers” and that name has stuck. 
The designation isn’t too bad, because the processes of encipherment and decipherment, though 
dpaliug not with the individual letters of the message but with entire words, involves foUowing 
the prescribed paths or routes in a diagram in which the message is written. I know no simpler 
or more succinct description of the route cipher than that given by one of the USMTC oper- 
ators, J. E. O’Brien, in an article in Century Magazine, XXXVIII, September 1889, entitled 
“Telegraphing in Battle”: 

“The principle of the cipher consisted in writing a message with an equal number of words in each 
line, then copying the words up and down the columns by various routes, throwing in an extra 
word at the end of each column, and substituting other words for important names and verbs.” 

A more detailed description in modem technical terms would be as foUows: A system in 
which in encipherment the words of the plaintext message are inscribed within a matrix of a 
specified number of rows and columns, inscribing the words within the matrix from left to right, 
in successive lines and rows downward as in ordinary writing, and taking the words out of the 
matrix, that is, transcribing them, according to a prearranged route to form the cipher message. 
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The specific routes to be followed were set forth in numbered booklets, each being labeled 
“War Department Cipher” followed by a number. In referring to them hereinafter I shall use 
the term “cipher books,” or sometimes, more simply, the term “ciphers,” although the crypto- 
system involves both cipher and code processes. It is true that the basic principle of the sys- 
tem, that of transposition, makes the system technically a cipher system as defined in our 
modem terminology; but the use of “arbitraries,” as they were called, that is, words arbitrarily 
assigned to represent the names of persons, geographic points, important nouns and verbs, 
etc., makes the system technically a code system as defined in our modem terminology. 
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There were in all about a dozen cipher books used by the USMTC throughout the war. For 
the most part they were employed consecutively, but, it seems that sometimes two different 
ones were employed concurrently. They contained not only the specific routes to be used but 
also indicators for the routes and for the sizes of the matrices; and, of course, there were lists 
of code words, with their meanings. These route dlphers were supposed to have been the in- 
vention of Anson Stager, whom I have mentioned before in connection with the establishment 
of the USMTC, and who is said to have first devised such ciphers for General McClellan’s use 
in West Virginia, in the summer of 1861, before McClellan came to Washington to assume com- 
mand of the Army of the Potomac. 

Anson Stager and many others thought that he was the original inventor of the system, but 
such a belief was quite in error because word-transposition methods similar to Stager’s were in 
use hvmdreds of years before his time. For instance, in 1685, in an unsuccessful attempt to 
invade Scotland, in a conspiracy to set the Duke of Monmouth on the throne, Archibald Camp- 
bell, 9th Earl of Argyll, suffered an unfortunate “accident.” He was taken prisoner and be- 
headed by order of James the Second. The communications of the poor Earl were not secure, 
and when they fell into government hands they were soon deciphered. The method Argyll 
used was that of word transposition, and if you are interested in reading a contemporary 
account of how it was solved, look on pages 56-59 of that little book I mentioned before as 
being one of the very first books in English dealing with the subject of cryptology, that by 
James Falconer, 'entitled Cryptomenysis Patefacta: Or the Art of Secret Information Disclosed 
Without a Key, published in London in 1685. There you will find the progenitor of the route 
ciphers employed by the USMTC, 180 years after Argyll’s abortive rebellion. 

The route ciphers employed by the USMTC are fully described in a book entitled The Mili- 
tary Telegraph during the Civil War, by Colonel William R. Plum, published in Chicago in 1882. 
I think Plum’s description of them is of considerable interest and I recommend his book to those 
of you who may wish to learn more about them, but Uiey are pretty much aU alike. If I show 
you one example of an actual message and explain its ^cipherment and decipherment I will 
have covered practically the entire gamut of the route ciphers used by the USMTC, so bsisically 
very simple and uniform were they. And yet, believe it or not, legend has it that the Southern 
Bignalmen were unable to solve any of the messages transmitted by the USMTC. This long- 
hdid legend I find hard to believe. In aU the descriptions I have encountered in the literature 
not one of them, save the one quoted above from O’Brien, tries to make these ciphers as simple 
as they really were; somehow, it seems to me, a subconscious realization on the part of Northern 
writers, usually ex-USMTC operators, of the system’s simplicity prevented a presentation 
which would clearly show how utterly devoid it was of the degree of sophistication one would 
be warranted in expecting in the secret communications of a great modem army in the decade 
1860-1870, three hundred years after the birth of modem cryptography in the papal states of 
Italy. 

Let us take the plain text of a message which Plum (p. 58) used in an example of the pro- 
cedure in encipherment. The cipher book involved is No. 4 and I happen to have a copy of it 
so we can easily check Plum’s work. Here’s the message to he enciphered: 



Washington, D. C. 
July 16, 1863 



For Simon Cameron 

I would give much to he rdieved of the impression that Meade, Couch, Smith and all, since 
the battle of Gettysburg, have striven only to get the enemy over the river without another 
fight. Please tell me if you know who was the one corps commander who was for fighting, in 
the council of war on Sunday night. 



(Signed) A. Lincoln 
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Plum shows the word-for-word encipherment in a matrix of seven columns and eleven rows.’ 
He fails to tell us why a matrix of those dimensions was selected; presumably the selection was 
made at random, which was certainly permissible. (See Fig. 56.) 

Note the seven “nulls” (non significant, or “blind” words) at the tops and bottoms of certain 
columns, these being added to the cipher text in order to confuse a would-be decipherer. At 
least that was the theory, but how effective this subterfuge was can be surmised, once it became 
known that emplosring nulls was the usual practice. Note also the two nulls (&lcss and him) 
at the end of the last line to complete that line of the matrix. Words in italics are “arbitraries” 
or code words. 

The cipher message is then copied down following the route prescribed by the indicator 
“BLONDE,” as given on page 7 of Cipher Book No. 4 for a message of 11 lines. The indi- 
cator could have also been “LINIMENT.” 



1 


2 


3 


4 


5 


6 


7 


(heavy 








(county) 


(square) 




(null) 








(null) 


(null) 




Incubus 


Stewart 


Brown 


Norris 


Knox 


Madison 




Wash., D.C. 


July 


ISth 


18 


60 


3 


for 


sigh 


man 


Gammer 


on 


flea 


I 


wood 


Simon 




Cameron 


(period) 


I 


would 


give 


much 


Toby 


trammeled 


serenade 


impression 


that 


give 


much 


to be 


relieved 


of the 


impression 


that 


Bunyan 


bear 


ax 


cat 


children 


and 


awl 


Meade 


, (comma) 


Couch 


, (comma) 


Smith 


and 


all 


bat 


since 


the 


knit 


of 


get 


ties 


, (comma) 


since 


the 


battle 


of 


Gettys 




targe 


ass 


have 


striven 


only 


to 


get 


burg 


, (comma) 


have 


striven 


only 


to 


get 


village 


skeleton 


turnip 


without 


another 


optic 


hound 


the enemy 


over 


the river 


without 


another 


%ht 


(period) 


Please 


teU 


me 


if 


you 


no 


who 


Please 


tell 


me 


if 


you 


know 


who 


was 


the 


Harry 


Madrid 


locust 


who 


was 


was 


the 


one 


corps 


commander 


who 


was 


for 


oppressing 


bitch 


quail 


counsel 


of 


war 


for 


fighting 


, (comma) 


in the 


council 


of 


war 


on 


Tyler 


Rustle 


upri^t 


Adrian 


bless 


him 


on 


Sunday 


night 


Signature 


A. Lincoln 


(null) 


(nuU) 




(monkey) 


(silk) 


(martyr) 






(suicide) 




(null) 


(null) 


(null) 






(nuU) 








Figure 56. 









To explain the diagram at the top of Fig. 57 I will show you the “Directions for Use” which 
appear on the reverse side of the title page of “War Department Cipher No. 4,” because I’m 
afraid you wouldn’t believe me if I merely told you what they say. In Fig. 58 is a jncture of 
the title page and I follow it with Fig. 59, a photograph of what’s on its reverse. 

Do you imagine that the chap who was responsible for getting this cipher book approved 
ever thought about what he was doing when he caused those “Directions for Use” to be print- 
ed? It doesn’t seem possible. All he would have had to ask himself was, “Why put this piece of 
information in the book itself? Cipher books before this have been captured. Suppose this 

* Ruled paper was provided to aid in accuracy. In the diagram the upper of each pair of lines of writing 
is the cipher, the lower one, the plain text. Simon Cameron was Lincoln’s Secretary of War untQ Jan. 1862, 
when he was replaced by Edwin M. Stanton. If this message cited by Plum is authentic, and there is no 
reason to doubt this, then Cameron was still in friendly contact with Lincoln, possibly as a special observer. 
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one falls into enemy hands; can’t he read, too, and at once learn about the intended deception? 
Why go to eiU the trouble of including “phoney” routes anyway? If the book doesn’t fall 
into enemy hands what good are the “phoney” routes ansnway? Why not just indicate the 
routes in a straight-forward manner, as had been done before? Thus: “Up the 6th column 
(since “6” is the first number at the left of the diagram), down the 3rd, up the 5th, down the 
7th, up the 1st, down the 4th and down the 2nd.” This matter is so incredibly fatuous that 
it is hard to understand how sensible men — and they were sensible — could be so illogical in 
their thinking processes. But there the “Directions for Use” stand, for all the world to see 
and to judge. 



WAR DEPARTMENT CIPHER NO. 4. 



DIRECTIONS FOR USE 



Tu litid the loiite, rriitl tlu> m tin Lihk at Input tmui left 

to right in till* m*h’i that Um \ meiir altenuiteK in tht upper .nul Inner 
lines tlu* tuo iiiteiimiliate hmeor figure*^ hating im i omi(‘( Imu nith 
the i«>ute, b« mg mirodiiei <l ^lntpl^ as a hhml» tlu u|>)H‘r lim of hgnixf 
denoting the mute ihtnt the i nlumii aiul tin loni^r lim 

ICtAMUM 

Set 14 , 7 ( nlumilK 

Honfi — rp tlu Jill , down the Hth , up the 1st , down the 7tl» , Up the 
2d , donn the Uh , up thu 5tli 

CVmiiienct* a cipliei with mu of the * liiu indicators,' Uikeit from 
same p*^e os louti ii-ed, whit h wi>nl imi«t iiuIkhU. tlie iiuiuKi <4 hues 
m the imssagi* r*>e two wnnU for mmi than tvrntjf lines 



F^ure 58. 



Figure 59. 
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Now for the transposition step. The indicator “BLONDE” signifies a matrix of seven 
columns and eleven rows, with the route set forth above, viz, up the 6th column, down the 3rd, 
etc., so that the cipher text with a “phoney” address and signature,^ becomes as follows: 

TO A. HARPER CALDWELL, Washington, D. C. 

Cipher Operator, Army of the Potomac: 

Blonde bless of who no optic to get and impression I Madison square Brown cammer Toby 
ax the have turnip me Harry bitch rustle silk Adrian counsel locust you another only of children 
serenade flea Knox County for wood that awl ties get hound who was war him suicide on for was 
please village large bat Bunyan give sigh incubus heavy Norris on trammeled cat knit striven 
without if Madrid quail upright martyr Stewart man much bear since ass skeleton tell the op- 
pressing Tyler monkey. 

(Signed) D. HOMER BATES 

Note that the text begins with the indicator “BLONDE.” In decipherment the steps are 
simply reversed. The indicator tells what size matrix to outline; the words beginning “bless 
of who no optic . . .” are inscribed within the matrix: up the 6th column; then, omitting the 
“check word” or “null” (which in this case is the word “square”) down the 3rd column, etc. 
The final result should correspond to what is shown in Fig. 56. There then follows the step of 
interpreting orthographic deviations, such as interpreting “sigh,” “man,” “cammer,” and “on” 
as Simon Cameron; the word “wood” for “would,” etc. The final step reproduces the original 
plain text. 

Save for one exception, aU the route ciphers used by the USMTC conformed to this basic 
pattern. The things that changed from one cipher book to the next were the indicators for 
the dimensions of the matrices and for the routes, and the “arbitraries” or code equivalents 
for the various iteni£ comprising the “vocabulary,” the number of them increasing from one 
edition to the next, just as might be expected. 'Ihe sole exception to this basic pattern is to 
be seen in Cipher Book No. 9 and on only one page of the book. I will show you that page. 
(See Fig. 60.) 

What we have here is a deviation from the straightforward route transposition, “up the . . . 
column, down the . . . column,” etc. By introducing one diagonal path in the route (the 6th, 
7th, 8th, 9th, 10th words in a message of five colunms, and the 1st, 2nd, 3rd, 4th, 5th, and 6th 
words in a message of six columns) the simple up and down route no longer holds true. The 
words on the diagonal interrupt the normal up and down paths and introduce complexities in 
the method. In fact, the complexities seemed to be a bit too much for the USMTC cipher 
operators because, as far as available records show, these complicated routes were never used. 

I now wish to make a nmnber of general and a few specific comments on Plum’s description 
of the cryptosystems used by the USMTC. 

First, we have learned that although Anson Stager has been credited with inventing the type 
of cipher under consideration in this study, he was anticipated in the invention by about 200 
years. Also, he is given the lion’s share of the credit for devising those ciphers although he 
did have a nmnber of collaborators. Plum names four of them, presumably because he thought 
them worthy of being singled out for particular attention. Plum and others tell us that copies 
of messages handled by the USMTC were sometimes intercepted by the enemy but not solved. 
He cites no authority for this last statement, merely saying that such intercepts were published 
in the newspapers of the Confederacy with the hope that somebody would come up with their 
solution. And it may be noted that none of the Confederate accounts of war activities cite 
instances of the solution of intercepted USMTC messages, although there are plenty of citations 
of instances of interception and solution of enciphered visual transmissions of the Federal 
Army’s Signal Corps. 



* It was the usual practice to use for address and signature the names of the USMTC operators concerned. 
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Lincoln V . 
Chase J 






Stanton I 
McClellan > 
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Figure 60. 

Plum states that 12 different cipher hooks were employed by the Telegraph Corps, but I 
think there were actually only eleven. The first one was not numbered, and this is good 
evidence that a long war was not expected. This first cipher book had 16 printed pages. 
But for some reason, now impossible to fathom, the sequence of numbered books thereafter 
was as follows: Nos. 6 and 7, which were much like the first (unnumbered) one; then came 
Nos. 12, 9, 10 — ^in that strange order; then came Nos. 1 and 2; finally came Nos. 3, 4, and 5. 
(Apparently there was no No. 8, or No. 11 — at least they are never mentioned.) It would be 
ridiculous to think that the irregularity in numbering the successive books was for the purpose 
of communication security, but there are other things about the books and the crjrptosystem 
that appear equally silly. There may have been good reasons for the erratic numbering of the 
hooks, but if so, what they were is now unknown. Plum states that No. 4, the last one used 
in the war, was placed into effect on 23 March 1865, and that it and all other ciphers were 
discarded on 20 June 1865. However, as noted, there was a No. 5, which Plum says was given 
a limited distribution. I have a copy of it, but whether it was actually put into use I do not 
know. Like No. 4, it had 40 pages. About 20 copies were sent to certain members of the 
USMTC, scattered among 12 states; and, of course, Washington must have had at least one 
copy. 

We may assume with a fair amount of certainty tiiat the first (the imnumbered) cipher book 
used by tiie USMTC was merely an elaboration of the one Stager produced for tiie communi- 
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cations of the governors of Ohio, Indiana and Illinois, and of which a copy is given by only 
one of the writers who have told us about these ciphers, neunely, David H. Bates. Bates, in 
his series of articles entitled “Lincoln in the Telegraph Office” (TAe Century Mc^azine, Vol. 
LXXIV, Nos. 1-5, May-Sept, 1907)® shows a facsimile thereof (p. 292, Jtme 1907 issue), and I 
have had as good a reproduction made of it as is possible from the rather poor photographic 
facsimile. The foregoing cipher is the prototype upon which aU subsequent cipher books were 
based, the first of the War Department series being the one shown by Plum. 
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Figure 61. 

When these ciphers came into use it was not the practice to misspell certain words inten- 
tionally; but as the members of the USMTC (who, as I’ve told you, not only served as telegraph 
operators but also as cipher clerks) developed expertness, the practice of using nonstandard 
orthography was frequently employed to make solution of messages more difficult. You have 
already seen examples of this practice, and one can find hundreds of other examples of this 
sort of artifice. Then, further to increase security, more and more code equivalents were 
added to represent such things as ordinal and cardinal numbers, months of the year, days of 
the week, hours of the day, punctuation, etc. As a last step, additional code equivalents for 
frequently used words and phrases were introduced. One good example of two ts^ical pages 
from one of these books will characterize them all. 

You win notice that the code equivalents are printed but their meanings are written in by 
hand. This was usually the case, and the reason is obvious: for economy in printing costs, 
because the printed code equivalents of plaintext items in cipher books belonging to the same 
series are identical; only their meanings change from one book to another, and of comrse, the 
transposition routes, their indicators, and other variables change from one book to another. I 



‘ The series was then put out in book form under the same title by the Appleton-Century Company, 
New York, 1907, reprinted in 1939. 
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Figure 62. 

am fortunate in having six of these cipher hooks in my private collection, so that comparisons 
among them are readily made. The first feature to be noted is that the code equivalents are 
all good English dictionary words (or proper nouns), of not less than three nor more than seven 
(rarely eight) letters. A careful scrutiny shows that in the early editions the code equivalents 
are such as are not very likely to appear as words in the plaintext messages; but in the later 
editions, beginning with No. 12, more than 50% of the words used as code equivalents are such as 
mi^t well appear in the plain text of messages. For example, words such as AID, ALL, ARMY, 
ARTILLERY, JUNCTION, CONFEDERATE, etc., baptismal names of persons, and names 
of cities, rivers, bays, etc., appear as code equivalents. Among names used as code equivalents 
are SHERMAN, LINCOLN, THOMAS, STANTON, and those of many other prominent 
officers and officials of the Union Army and the Federal Government, as well as of the Con- 
federate Army and Government; and, even more intriguing, such names were employed as 
indicators for the number of columns and the routes used — the so-called “Commencement 
Words.” It would seem that names and words such as those I’ve mentioned might occasionally 
have brought about instances where difficulty in deciphering messages arose from this source 
of confusion, but the literature doesn’t mention them. I think you already realize why such 
commonly used proper names and words were not excluded. There was, indeed, method in 
this madness. 

But what is indeed astonishing to note is that in the later editions of these cipher books, in 
a great majority of cases, the words used as “arbitraries” differ from one another by at least 
two letters (for example, LADY, and LAMB, LARK and LAWN, ALBA and ASIA, LOCK 
and WICK, MILK and MINT), or by more than two (for example MYRTLE and MYSTIC, 
CARBON and CANCER, ANDES and ATLAS). One has to search for cases in which two 
words differ by only one letter, but they can be foimd if you search long enough for them, as, 
for example, QUINCY and QUINCE, PINE and PIKE, NOSE and ROSE. Often there are 
words with the same initial trigraph or tetragraph, but then the rest of the letters are such 
that errors in transmission or reception would easily manifest themselves, as, for example, in 
the cases of MONSTER and MONARCH, MAGNET and MAGNOLIA. All in all, it is 
important to note that the compiler or compilers of these cipher books had adopted a principle 
known today as the “two-letter differential,” a feature found only in codebooks of a much later 
date. In brief, the principle involves the use, in a given codebook, of code groups differing 
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from one another by at least two letters. 11118 principle is employed by knowledgeable code 
compilers to this very day, not only because it enables the recipient of a message to detect 
errors in transmission or reception, but also to correct them. This is made possible if the 
permutation tables used in constructing the code words are printed in the codebooks, so that 
most errors can be corrected without calling for a repetition of the transmission. It is clear, 
therefore, that the compilers of these cipher books took into consideration the fact that errors 
are to be expected in Morse telegraphy, and by incorporating, but only to a limited extent, 
the principle of the two-letter differential, they tried to guard against the possibility that 
errors might go undetected. Had artificial 5-letter groups been used as code equivalents, 
instead of dictionary words, possibly the cipher books would also have contained the permu- 
tation tables. But it must be noted that permutation tables made their first appearance only 
tbout a quarter of a century after the Civil War had ended, and then only in the most advanced 
aypes of commercial codes. 

There is, however, another feature about the words the compilers of these books chose as 
code equivalents. It is a feature that manifests real perspicacity on their part, and you prob- 
ably already have divined it. A few moments ago I said that I would explain why, in the 
later and improved editions of these books, words which might well be words in plaintext 
messages were not excluded from the lists of code equivedents: it involves the fact that the 
basic nature of the cryptosystem in which these code equivalents were to be used was clearly 
recognized by those who compiled the books. Since the cryptosystem was based upon word 
transposition, what could be more confusing to a would-be cryptanalyst, working with mes- 
sages in such a system, than to find himself imable to decide whether a word in the cipher text 
of a message he is trsdng to solve is actually in the original plaintext message and has its nor- 
mal meaning, or is a code word with a secret significance — or even a nuU, a nonsignificant word, 
a “blind” or a “check word,” as those elements were called in those days? That, no doubt, 
is why there are, in these books, so many code equivalents which might weU be “good” words 
in the plaintext messages. And in this connection I have already noted an additional interesting 
feature: at the top of each page devoted to indicators for signaling the number of columns or 
rows in the specific matrix for a message are printed the so-called “commencement words,” or 
what we now call “indicators.” Now there are nine such words, in sets of three, any one of 
which covM actually be a real word or name in the plaintext message. Such words when used 
as indicators could be very confusing to enemy cryptanalysts, especially after the transposition 
operation. Here, for example, are the “commencement words” on page 5 of cipher book No. 
9: Army, Anson, Action, Astor, Advance, Artillery, Anderson, Ambush, Agree; on page 7 of 
No. 10: Cairo, Curtin, Cavalry, Congress, Childs, Calhoim, Church, Cobb, etc. Moreover, 
in Nos. 1, 3, 4, 5, and 10 the “line indicators,” that is, the words indicating the number of hori- 
zontal rows in the matrix, are also words such as could easily be words in the plaintext messages. 
For example, in No. 1, page 3, the line indicators are as follows: 



Address 


1 


Faith 


Assume 


6 


Bend 


Adjust 


2 


Favor 


Awake 


7 


Avail 


Answer 


3 


Confine 


Encamp 


8 


Active 


Appear 


4 


Bed 


Enroll 


9 


Absent 


Appeal 


5 


Beef 


Enough 


10 


Accept 



Note two things in the foregoing list: first, there are variants — there are two indicators for 
each case; and second, the indicators are not in strict alphabetic sequence. This departure 
from strict alphabeticity is even more obvious in the pages devoted to vocabulary, a fact of 
much importance cr 3 q)tanalytically. Note this feature, for example, in Fig. 62, which shows 
pages 14 and 15 of cipher book No. 12. 

In this respect, therefore, these books partake somewhat of the nature of two-part or “ran- 
domized” codes, or, in British terminology, “hatted” codes. In the second lecture of this 
series the physical difference between one-part and two-part codes was briefiy e3q>lained, but 
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an indication of the technical cryptanalytic difference between these two types of codes may 
be useful at this point. Two-part codes are much more difficult to solve than one-part codes, 
in which both the plaintext elements and their code equivalents progress in parallel sequences. 
In the latter type, determination of the meaning of one code group quickly and rather easily 
leads to the determination of the meanings of other code groups above or below the one that 
has been solved. For example, in the following short but illustrative example, if the meaning 
of code group 1729 has been determined to be “then,” the meaning of the code group 1728 
could well be “the” and that of 

1728 — the 7621 — the 

1729 — then 0972 — then 

1730 — there 1548 — there 

the code group 1730, “there.” But in a two-part code, determining the meaning of the code 
group 0972 to be “then” gives no clue whatever as to the meaning of the groups 7621 or 1548. 
For ease in decoding messages in such a code there must be a section in which the code groups 
are listed in munerical sequence and are accompanied by their meanings, which, of course, 
will be in a random sequence. The compilers of the USMTC cipher books must have had a 
very clear idea of what I have just esqplained, but they made a compromise of a practical nature 
between a strictly one-part and a strictly two-part code, because they realized that a code of 
the latter sort is twice as bulky as one of the former sort, besides being much more laborious 
to compile and check the contents for accuracy. The arrangement they chose wasn’t too bad, 
so far as cryptosecurity was concerned. As a matter of fact, and speaking from personal 
experience in decoding a rather long message addressed to General Grant, 1 had a difficult time 
in locating many of the code words in the book, because of the departure from strict alpha- 
heticity. I came across that message in a workbook in my collection, the workbook of one of 
the important members of the USMTC — ^none other than our friend Plum, from whose book. 
The Military Telegraph during the Civil War, comes mudn of the data I’ve presented in this 
lecture. On the flyleaf of Plum’s workbook there appears, presumably in his own handwriting, 
the legend “W. R. Plum Chf Opr with Gen. G. H. Thomas.” Here’s one of the messages he 
enciphered in cipher book No. 1, the book in which, he says, more important telegrams were 
sent than in any other: 




Figure 63. 



Note how many “arbitraries” appear in the plaintext message, that is before transposition. 
After transposition, the melange of plain text, code words, indicators and nulls makes the cryp- 
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CONFBDERATS STATES ClFHEB KeY. 

26 25 8423 22 2120191817161514181211 10 0 87654321 
1 abode fghijklmnopq r s tuvwxyz 
2bcde fghi j klmnopq r s tuvwxyz a 
Scdefghijklmnopqrstnvwxyzab 
4defghij klmnopqrs tuvwxyzabc 
defghijklmnopqrstuvwxyzabcd 
6 fgh i j k Imnopq rat uvwxyzabcde 
7ghiJkImnopqrstuvwxyzabcde f 
Shijklmnopqratuvwxyzabcde fg 
Oijklmnopqratuvwxyzabcdefgh 
lOjklmnopqratttvwxyzabcdefghi 
llklmnopqrstuvwxyzabcdefghi j 
12 1mnopqratuvwxyzabcdefghij k 
ISmnopqratuvwxyzabcdefghijkl 
14nopqratuvwxyzabcde fghi J klm 
15opq ra tuvwxyzabcd e fghi j k Imn 
16pqratuvwzyzabcde fghijklmno 
17 q ratuvwxyzabcde fgh i j klmnop 
ISratuvwxyzabcde fghi j klmnopq 
19atuvwxyzabcdefgh ij klmnopq r 
20tuvwxyzabcdefgh i j klmnopq r a 
21 uvwxyzabcde fgh i j klmnopqr a t 
22vwxyzabcde fghi j k Imnopqr a t u 
23wxyzabcdefghijklmnopqratuv 
24xyzabcdefghijklmncpqratuvw 
25yzabcdefghijklmnopq ratuvwx 
26zabode fghij klmnopq r a tuvwxy 

Figure 64. 

togram mystifying.^ And yet, was the system as inscrutable as its users apparently thought? 
It is to be remembered, of course, that messages were then transmitted by wire telegraphy, 
not by radio, so that enemy messages could be obtained only by “tapping” telegraph lines or 
capturing couriers or headquarters with their files intact. Opportunities for these methods of 
acquiring enemy trafiic were not frequent, but they did occur from time to time, and in one 
case a Confederate signalman hid in a swamp for several weeks and tapped a Federal telegraph 
line, obtaining a good many messages. What success, if any, did Confederate cryptanals^ts 
have in their attempts to solve suc^ USMTC cryptograms as they did intercept? We shall 
try to answer this question in due time. 

As indicated earlier, there were no competing signal organizations in the Confederacy as 
there were on the Union side. There w£^ nothing at the center of government in Richmond or 
in the combat zone comparable to the extensive and tightly controlled civilian military tele- 
graph organization which Secretary Stanton ruled with such an iron hand from Washington. 
Almost as a concomitant, it woidd seem, there was in the Confederacy, save for two exceptional 
cases, one and only one officially established cryptosystem to serve the need for protecting 
tactical as well as strategic communications, and that was the so-called Vigendre Cipher, which 
apparently was the cipher authorized in an official manual prepared by Captain J. H. Alexander 
as the partial equivalent of Myer’s Manual of Signals. You won’t find the name Vigen^e in 



< In searching for a good example my eye caught the words “Lincoln shot” at the left of the matrix and I 
immediately thought that the message had to do with Booth’s assassination of the President. But after hur- 
riedly translating the message and finding nothing in it having anything to do with the shooting it occurred 
to me to look up the indicators for a matrix of six rows and eight columns. They turned out to be LINCOLN 
(message of 8 columns), SHOT (6 rows). The word SMALL beneath the “Lincoln shot” is a variant for 
SHOT, also meaning “6 rows.” 
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any of the writings of contemporary signal officers of either the North or the South. The 
signalmen of those days called it the “Court Cipher,” this term referring to the system in 
common use for diplomatic or “court” secret communications about this period in history. It 
is that cipher which employs the so-called Vigen^re Square with a repeating key.^ Here in 
Fig. 64 is the square which Plmn calls the “Confederate States Cipher Key” and which is 
followed by his description of its manner of employment. 

There are certain comments to be made on the two sample messages given by Plum. In the 
first place, in one of the messages certain words are left unenciphered; in the second place, in 
both sample messages, the ciphers retain and clearly show the lengths of the words which have 
been enciphered. Both of these faulty practices greatly weaken the security of ciphers because 
they leave good clues to their contents and can easily result in facilitating solution of the mes- 
sages. We know today that cipher messages must leave nothing in the clear. Even the 
address and the signature, the date, time and place of origin, etc., should if possible be hidden; 
and the cipher text should be in completely regular groupings, first, so as not to disclose the 
lengths of the plaintext words, and second, to promote accuracy in transmission and reception. 

So far as my studies have gone, I have not found a single example of a Confederate Vigen^re 
cipher which shows neither of these two fatal weaknesses. The second of the two examples is 
the only case 1 have fotmd in which there are no unenciphered words in the text of the message. 
And the only example I have been able to find in which word lengths are not shown (save for 
one word) is in the case of the following message: 

Vicksburg, Dec. 26, 1862. 

GEN. J. E. JOHNSTON, JACKSON: 

I prefer oaavvr, it has reference to zhvkjqchffabpzelreqpzwnyk to prevent anuzeyxswstpjw at 
that point, raedpsghvelvtzfauthlaslt Ihifnaigtsmmlfgccajd. 

(Signed) J. C. PEMBERTON 
Lt. Gen. Comdg. 

Even in this case there are unenciphered words which afforded a clue which enabled our man 
Plum to find the key and solve the message. It took some time, however, and the story is 
worth telling. 

According to Plum, the foregoing cipher message was the very first one captured by USMTC 
operators, and it was obtained during the siege of Vicksburg, wMch smrrendered on 4 July 1863. 
But note the date of the message: 26 December 1862. What was done with the captured 
message during the months from the end of December 1862 to July 1863? Apparently nothing. 
Here is what Plum reports: 

“What efforts General Grant caused to be made to unravel this message, we know not. It was 
not until October, 1864, that it and others came into the hands of the telegraph cipherers, at 
New Orleans, for translation .... 

The New Orleans operators who worked out this key (Manchester Bluff) were aided by the 
Pemherton cipher and the original telegram, which was found among that general’s papers, aft- 
er the surrender of Vicksburg; also by the following cipher dispatch, and one other.” 

Plum gives the messages involved, their solution, and the keys, the latter being the three 
cited above. It would seem that if the captured Pemberton message had been brought to 
General Grant’s attention and he did nothing about it, he was not much interested in intdl- 
ligence. Secondly, the solution of the Pemberton message and the others apparently took 
some time, even though there was one message with its plain text (the Pemberton message) 
and two messages not only with interspersed plaintext words but also with spaces showing word 
lei^hs. But Plum does not indicate how long it took for solution. Note that he merely 
says that the messages came into the hands of the telegraph cipherers in October 1864; he does 
not teU when solution was reached. 



^ A key word is employed to change the alphabets cyclically, thus nmking the cipher what is called today a 
periodic polyalphabetic cipher controlled by the individual letters of a key, which may consist of a word, a 
phrase, or even of a sentence, repeated as many times as necessary. 
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In the various accounts of these Confederate ciphers there is one and only one writer who 
makes a detailed comment on the two fatal practices to which I refer. A certain Dr. Charles 
E. Taylor, a Confederate veteran (in an article entitled “The Signal and Secret Service of the 
Confederate States,” published in the Confederate Veteran, Vol. XL, Aug-Sept 1932), after 
giving an example of encipherment according to the “court cipher,” says: 

“It hardly needs to be said that the division between the words of the original message as given 
above was not retained in the cipher. Either the letters were run together continuously or 
breaks, as if for words, were made at random. Until the folly of the method was revealed by 
experience, only a few special words in a message were put into cipher, while the rest was sent 
in plain language. Thus ... I think it may be said that it was impossible for well prepared ci- 
pher to be correctly read by any one who did not know the key-word. Sometimes, in fact, we 
"^ould not decipher our own messages when they came over tdegraph wires. As the operators 
had no meaning to guide them, letters easily became changed and portions, at least, of messages 
rendered unmeaningly (sic) thereby.” 

Frankly, I don’t believe Dr. Taylor’s comments are to be taken as characterizing the prac- 
tices that were usually followed. No other ex-signahnan who has written about the ciphers 
used by the Confederate Signal Corps makes such observations, and I think we must simply 
discoxmt what Dr. Taylor says in this regard. 

It would certainly be an unwarranted exaggeration to say that the two weaknesses in the 
Confederate cryptosystem cost the Confederacy the victory for which it fought so mightily, 
but I do feel warranted at this moment in saying that further research may well show that 
certain battles and campaigns were lost because of insecure cryptocommunications. 

A few moments ago I said that, save for an exception or two, there was in the Confederacy 
one and only one cryptosystem to serve the need for secure tactical as well as strategic com- 
munications. One of these exceptions concerned the cipher used by General Beauregard after 
the battle of Shiloh (8 April 1862). This cipher was purely monoalphabetic in nature and was 
discarded as soon as the official cipher system was prescribed in Alexander’s manual. It is 
interesting to note that this was done after the deciphered message came to the attention of 
Confederate authorities in Richmond via a northern newspaper. It is also interesting to note 
that the Federal War Department had begun using the route cipher as the official system for 
USMTC messages very promptly after the outbreak of war, whereas not until 1862 did the 
Confederate States War Department prepare an official cryptosystem, and then it adopted the 
“court cipher.” 

The other exception involved a system used at least once before the official system was 
adopted, and it was so different from the latter that it should be mentioned. On 26 March 
1862, the Confederate States President, Jefferson Davis, sent General Johnston by special 
messenger a dictionary, with the following accompanying instruction:^ 

“I send you a dictionary of which I have the duplicate, so that you may communicate with me 
by cipher, telegraphic or written, as follows: First give the page by its number; second, the 

column by the letter L, M or R, as it may be, in the left-hand, middle, or right-hand columns; 
third, the number of the word in the column, counting from the top. Thus, the word junction 
would be designated by 146, L, 20.” 

The foregoing, as'you no doubt have already realized, is one of the types of cryptosystems 
used by both sides during the American Revolutionary Period almost a century before, except 
that in this case the dictionary had three columns to the page instead of two. I haven’t tried 
to find the dictionary but it shouldn’t take long to locate it, since the code equivalent of the 
word “jxmction” was given: 146, L, 20. Moreover, there is extant at least one fairly long 
message, with its decode. How many other messages in this system there may be in National 
Archives I don’t know. 

Coming back now to the “court cipher,” you will probably find it just as hard to believe, as 
I find it, that according to aU accounts three and only three keys were used by the Confederates 



* Batties and Leaders of the Civil War. The Century Co., New York, 1884, Vol. I, p. 581. 
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during the three and a half years of warfare from 1862 to mid-1865. It is true that Southern 
signalmen make mention of frequent changes in key but only the following three are specidcally 

1) COMPLETE VICTORY 

2) MANCHESTER BLUFF 

3) COME RETRIBUTION. 

It seems that aU were used concurrently. There may have been a fourth key, IN GOD 
WE TRUST, but I have seen it only once, and that is in a book explaining the “comt cipher.” 
Note that each of the three keys listed above consists of exactly 15 letters, but why this length 
was chosen is not dear. Had the rule been to make the dpher messages contain only 5-letter 
groups, the e^lanation would be easy: 15 is a multiple of 5 and this would be of practical 

value in checking the cryptographic work. But, as has been clearly stated, disguising word 
lengths was apparently not the practice even if it was prescribed, so that there was no advan- 
tage in choosing keys which contain a miiltiple of 5 letters. And, by the way, doesn’t the key 
COME RETRIBUTION sound rather ominous to you even these days? 

Sooner or later a Confederate signal officer was bound to come up with a device to simplify 
enciphering operations, and a gadget devised by a Captain William N. Barker seemed to meet 
the need. In Myer’s Manual there is a picture of one form of the device, shown here in Fig. 
65. I don’t think it necessary to explain how it worked, for it is almost self-evident. Several 
of these devices were captured during the war, one of them being among the items in the NSA 
Museum (Fig. 66). This device was captmred at Mobile in 1865. AU it did was to mechanize, 
in a rather inefficient manner, the use of the Vigendre Cipher. 




'oaaaaaaDoaofiieiDBBsoa 
pcapaaonaaDoascaaci 
mataaaaamtiaaaaaDaaoe 
iSaaaacaf 




Cipher Reel. 
Figure 65. 



How many of these devices were in existence or use is unknown, for their construction was 
an individual matter — apparently it was not an item of regular issue to members of the corps. 

In practicaUy every account of the codes and ciphers of the Civil War you wiU find references 
to ciphers used by Confederate secret service agents engaged in espionage in the North as weU 
as in Canada. In particular, much attention is given to a set of letters in cipher, which were 
intercepted by the New York City Postmaster and which were involved in a plot to print 
Confederate currency and bonds. Much ado was made about the solution of these ciphers by 
cipher operators of the USMTC in Washington and the consequent breaking up of the plot. 
But I won’t go into these ciphers for two reasons. Fimt, the alphabets were aU of the simple 
monoalphabetic type, a total of six altogether being used. Since they were composed of a dif- 
ferent series of symbols for each alphabet, it was possible to compose a cipher word by jiunping 
from one series to another without any external indicalion of the shift. However, good eyesight 
and a bit of patience were aU that was required for solution in this case because of the inept 
manner in which the system was used: whole words, sometimes several successive words, were 
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enciphered by the same alphabet. But the second reason for my not going into the story is 
that my friend and colleague of my NSA days, Edwin C. Fishel, has done some research among 
the records in our National Archives dealing with this case, and he has found something which 
is of great interest and which I feel bound to leave for him to tell at some future time, as that 
is his story, not mine. 




Figure 66. 

So very fragmentary was the amount of crsrptologic information known to the general 
public in these days that when there was found on John Wilkes Booth’s body a cipher square 
which was almost identical with the cipher square which had been mounted on the cipher reel 
foimd in Confederate Secretary of State Judah P. Benjamin’s ofSce in Richmond, the Federal 
authorities in Washington attempted to prove that this necessarily meant that the Confederate 
leaders were implicated in the plot to assassinate Lincoln and had been giving Booth instruc- 
tions in cipher. Fig. 67 is a picture of the dpher square found on Booth, and also in a trunk 
in his hotel room in Washington. 

The following is quoted from Philip Van Doren Stem’s book entitled Secret Missions of the 
Civil War (Rand McNally and Co., New York, 1951, p. 320): 

“Everyone in the War Department who was familiar with cryptography knew that the Vigengre 
was the customary Confederate cipher and that for a Confederate agent (which Booth is known 
to have been) to possess a copy of a variation of it meant no more than if a telegraph operator 
was captured with a copy of the Morse Code. Hundreds — and perhaps thousands — of people were 
using the Vigen^re. But the Government was desperately seeking evidence against the Con- 
federate leaders so they took advantage of the atmosphere of mystery which has always sur- 
rounded cryptography and used it to confuse the public and the press. This shabby trick gained 
nothing, for the leaders of the Confederacy eventually had to be let go for lack of evidence.” 

To the foregoing I will comment that I doubt very much whether “everyone in the War 
Department who was familiar with cryptography knew that the Vigen^re was the customary 
Confederate cipher.” Probably not one of them had even heard the name Vigen^re or had 
even seen a copy of the table, except those captured in operations. I doubt whether anyone 
on either side even knew that the cipher used by the Confederacy had a name; or least of 
all, that a German Army reservist named KasisM, in a book published in 1863, showed how the 
Vigenere cipher could be solved by a straightforward mathematical method. 

I have devoted a good deal more attention to the methods and means for cryptocommu- 
nications in the Civil War than they deserve, because professional cryptologists of 1961 can 
hardly be impressed either by their efficacy from the point of view of ease and rapidity in the 
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cryptographic processing, or by the degree of the technical security they imparted to the mes- 
sages they were intended to protect. Not much can be said for the security of the visual 
Bi gnali ng systems used in the combat zone by the Federal Signal Corps for tactical purposes, 
because they were practically all based upon simple monoalphabetic ciphers, or variations 
thereof, as, for instance, when whole words were enciphered by the same alphabet. There is 
plenty of evidence that Confederate signalmen were more or less regularly reading and solving 
those signals. What can be said about the security of the route ciphers used by the USMTC 
for strategic or high command communications in the zone of the interior? It has already 
been indicated that, according to accotmts by ex-USMTC men, such ciphers were beyond the 
cryptanalytic capabilities of Confederate cryptanalysts, but can we really believe that this 
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was true? Considering the simplicity of these route ciphers and the undoubted intellectual 
capacities of Confederate officers and soldiers, why should messages in these systems have 
resisted cryptanalytic attack? In many cases the general subject matter of a message and 
perhaps a number of specific items of information could be detected by quick inspection of 
the message. Certainly, if it were not for the so-called “arbitraries,” the general sense of the 
message could be foimd by a few minutes work, since the basic system must have been known 
through the capture of cipher books, a fact mentioned several times in the literature. Cap- 
ture of but one book (they were all generally alike) would have told Confederate signalmen 
exactly how the system worked, and this would naturally give away the basic secret of the 
superseding book. So we must see that whatever degree of protection these route ciphers af- 
forded, message security depended almost entirely upon the number of “arbitraries” actually 
used in practice. A review of such messages as are available shows wide divergencies in the 
use of “arbitraries.” In any event, the number actually present in these books must have 
fallen far short of the number needed to give the real protection that a well-constructed code 
can give. Thus it seems to me that the application of native intelligence, with some patience, 
should have been sufficient to solve USMTC messages — or so it would be quite logical to as- 
sume. That such an assumption is well warranted is readily demonstrable. 

It was, curiously enough, at about this point in preparing this lecture that Mr. Edwin C. 
Fishel, whom I have mentioned before, gave me just the right material for such a demonstra- 
tion. In June of 1960, Mr. Fishel had given Mr. Phillip Bridges, who is also a member of 
NSA and who knew nothing about the route ciphers of the USMTC, the following authentic 
message sent on 1 July 1863 by General George G. Meade, at Harrisburg, Pennsylvania, to 
General Couch at Washington. (See Fig. 68.) 

It took Mr. Bridges only a few hours, five or six, to solve the cryptogram, and he handed 
the following plain text to Mr. Fishel: 



O.U (^ouuLUjl 0'-^ (h^oJL. ‘ 

OKf3 






Fimire 68. 



Thomas been it — (Nulls) 

For Parson. I shall tiy and get to you by tomorrow morning a reliable gentleman and some 
scouts who are acquainted with a country you wish to know of. Rebels this way have all con- 
centrated in direction of Gettysburg and Chambersburg. 1 occupy Carlisle. Signed Optic. 
Great battle very soon, tree much deal — (Nulls) 
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The foregoing solution is correct, save for one pardonable error: “Thomas” is not a “null” 
but an indicator for the dimensions of the matrix and the route. “Parson” and “Optic” are 
code names, and I imagine that Mr. Bridges recognized them as such but, of course, he had no 
way of interpreting them, except perhaps by making a careful study of the events and com- 
manders involved in the impending action, a study he wasn’t called upon to undertake. 

The foregoing message was enciphered by Cipher Book No. 12, in which the indicator 
THOMAS specifies a “Message of 10 lines and 5 columns.” The route was quite simple and 
straightforward: “Down the 1st (column), up the 3rd; down the 2nd; up the 5th down the 
4th.” 

It is obvious that in this example the absence of many “arbitraries” made solution a rela- 
tively easy matter. What Mr. Bridges would have been able to do with the cryptogram had 
there been many of them is problematical. Judging by his worksheets, it seemed to me that 
Mr. Bridges did not realize when he was solving the message that a transposition matrix was 
involved; and on questioning him on this point his answer was in the negative. He realized 
this only later. 

A minor drama in the fortunes of Major General D. C. BueU, one of the high commanders 
of the Federal Army, is quietly and tersely outlined in two cipher telegrams. The first one, 
sent on 29 September 1862, from Louisville, Kentuc^, was in one of the USMTC cipher 
books and was externally addressed to Colonel Anson Stager, head of the USMTC, but the 
internal addressee wa^ Major General H. W. Halleck, “General-in-Chief” [our present day 
“Chief of Staff”]. The message was externally signed by William H. Dralm, Buell’s cipher 
operator, but the name of the actual sender, BueU, was indicated intemaUy. Here’s the tele- 
gram: 

COLONEL ANSON STAGER, Washington: 

Austria await I in over to requiring orders olden rapture blissful for your instant command 
turned and instructiona and rough looking further shall further the Camden me of ocean Sep- 
tember poker twenty I the to I command obedience repair orders quickly pretty Indianapolis 
your him accordingly my foiuih received 1862 wounded nine have twenty turn have to to to 
alvord hasty. 

WILLIAM H. DRAKE 

Rather than give you the plain text of this message, perhaps you would like to work it out 
for yourselves, for with the information you’ve already received the solution should not be 
difiicult. The message contains one error, which was made in its original preparation: one 
word was omitted. 

The second telegram, only one day later, was also from Major General BueU, to Major 
General HaUeck, but it was in another cipher book — ^apparently the two books involved were 
used concurrently. Here it is: 

GEORGE C. MAYNARD, Washington: 

Regulars ordered of my to public out suspending received 1862 spoiled thirty I dispatch com- 
mand of continue of best otherwise worst Arabia my command discharge duty of my last for 
Lincoln September period your from sense shall duties the until Seward ability to the I a removal 
evening Adam herald tribune.’ 

PHILIP BRUNER 

As before, I wiU give you the opportunity to solve this message for yourselves. (At the 
end of the next lecture I shaU present the plain text of both messages.) 

Figiue 69 is a photograph of an important message which you may wish to solve yourself- 
It was sent by President Jefferson Davis to General Johnston, on a very significant date, 11 



’ A curious coincidence — or was it a fortuitous foreshadowing of an event &r in the future? — can be seen in the 
sequence of the last two words of the cipher text. The message is dated September 30, 1862; the New York 
Herald and the New York Tribune combined to make the New York Herald-Tribune on March 19, 1924 — 62 
years later! 
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April 1865.* For ease in working on it I give also a transcription below, since the photograph 
is very old and in a poor state. I believe that this message does not appear in any of the ac- 
counts I’ve read. 



Greensboro N.C. 

April 11 1865 

Benaja 11 Hd Q near R. G. 

Genl J. E. Johnston 

A scout (reports?) that Genl Lee 
uiDvvswvzFx-mqs-EGAzox- 
HW-PJM— TzAT— near to appomattox Court 
house yesterday No official intelligence of the 
event DiF— xyikv-qT-FBBHYG- 
FASD-JHi-LPOuB-Asto result Gen H. H. 

Walker is ordered YWFT-WSKTMT-BXzS- 
Gq-XAmE-CHT-iu-AKMSAuPuVF- 
Let me hear from you there— I will have need to 
see you to confer as to future action. The above 
is my telegram of yesterday which is repeated as 
requested. 

Jeffn Davis 
Official 

Burton Harrison 
Private Secy 

It is time now to tell you what I can about the success or lack of success which each side 
had with the cryptograms of the other side. I wish there were more information on this in- 
teresting subject than what I am about to present. Most of what sound information there 
is comes from a book by a man named J. Willard Brown, who served four full years in the 
Federal Army’s Signal Corps. The book is entitled The Signal Corps, UJ3.A., in the War of 
the Rebellion, published in Boston in 1896 by the U.S. Veteran Signal Corps Association. In 
his book Brown deals with the cryptanalytic success of both sides. First, let’s see what the 
Union signalmen could do with rebel ciphers. Here are some statements he makes (p. 214): 

“The first deciphering of a rebd signal code of which I find any record was that made by Capt. 

J. S. Hall and Capt. R. A. Taylor, reported Nov. 25, 1862. Four days later, Maj. Myer wrote 
to Capt. Cushing, Chief Signal Officer, Army of the Potomac, not to permit it to become public 
‘that we translate the signal messages of the rebdl army.’ 

April 9, 1863, Capt. Fisher, near Falmouth, reported that one of his officers had read a rebel 
message which proved that the rebels were in possession of our code. The next day he was in- 
formed that the rebel code taken (from) a rebel signal officer was identical with one taken pre- 
viously at Yorktown. 

He received from Maj. Myer the following orders: 

‘Send over your lines, from time to time, messages which, if it is in the power of the enemy 
to decipher them, will lead them to believe that we cannot get any dew to their signals.’ 

‘Send also occasionally messages untrue, in reference to imaginary military movements, as for 
instance — “The Sixth Corps is ordered to reinforce Keyes at Yorktown.’’ ’ ’’ 

Undoubtedly, what we have here are references to the general cipher system used by the 
Confederates in their electric-telegraph communications, for note the expression “Send over 
your lines.” This could hardly refer to visual communications. Here we also have very 
early instances, in telegraphic communications, of what we call cover and deception, i.e., 
emplosdng certain ruses to try to hide the fact that enemy signals could be read, and to try to 
deceive him by sending spmdous messages for him to read, hoping the fraud will not be detected. 



* I should warn you that it contains several errors! 
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Brown’s accoiuit of Union crs^tanalytic successes continues (p. 215): 

“In October, 1863, Capt. Merrill’s party deciphered a code, and in November of the same year 
Capt. Thickstun and Capt. Marston deciphered another in Virginia. 

Lieut. Howgate and Lieut. Flook, in March, 1864, deciphered a code in the Western Army, 
and at the same time Lieut. Benner found one at Alexandria, Virginia. 

Capt. Paul Babcock, Jr., then Chief Signal Officer, Department of the Cumberland, in a letter 
dated Chattanooga, Tennessee, April 26, 1864, transmitting a copy of the rebel signal code, says: 
‘Capt. Cole and Lieut. Howgate, acting Signal Officers, occupy a station of communi- 
cation and observation on White Oak Ridge at Ringgold, Ga. . . . On the 22nd inst. the 
rebels changed their code to the one enclosed, and on the same day the above-mentioned 
officers by untiring zeal and energy succeeded in translating the new code, and these 
officers have been ever since reading every message sent over the rebel lines. Many 
of these messages have furnished valuable information to the general commanding the 
department.’ ’’ 

The following is also from Brown (p. 279): 

“About the first of June (1864), Sergt. Colvin was stationed at Fort Strong, on Morris Island, 
with the several codes heretofore used by the rebels, for the purpose of reading the enemy 
signals if possible. For nearly two weeks nothing could be made out of their signals, but by 
persevering he finally succeeded in learning their codes. Messages were read by him from 
Beach Inlet, Battery Bee, and Fort Johnson. Gen. J. G. Foster, who had assumed command 
of the Department of the South, May 26th, was so much pleased with Sergt. Colvin’s work, 
that in a letter addressed to Gen. Halleck, he recommended ‘that he be rewarded by promo- 
tion to Lieutenant in the Signal Corps, or by a brevet or medal of honor.’ This recommenda- 
tion was subsequently acted upon, but, through congressional and official wrangling over ap- 
pointments in the Corps, he was not commissioned until May 13, 1865, his commission dating 
from Feb. 14, 1865.’’ 

(p. 281): 

“During the month, Sergt. Colvin added additional laurels to the fame he had earned as a suc- 
cessful interpreter of rebel signals. The enemy had adopted a new cipher for the transmis- 
sion of important messages, and the labor of deciphering it devolved upon the sergeant. Con- 
tinued watchfulness at last secured the desired result, and he was again able to translate the impor- 
tant dispatches of the enemy for the benefit of our commandants. The information thus gained 
was frequently of special value in our operations, and the peculiar ability exhibited by the ser- 
geant led Gen. Foster once more to recommend his promotion.’’ 

(p. 286) 



“About the same time an expedition under Gen. Potter was organized to act in conjunction 
with the navy in the vicinity of Bull’s Bay. Lieut. Fisher was with this command, and by 
maintaining communications between the land and naval forces facilitated greatly the conjoined 
action of the command. Meanwhile every means was employed to intercept rebel messages. 

Sergt. Colvin, assigned to this particular duty, read all the messages within sight, and when the 
evacuation of Charleston was determined upon by the enemy, the first notification of the fact 
came in this way before the retreat had actually commenced. As a reward for conspicuous serv- 
ices rendered in this capacity, Capt, Merrill recommended that the sergeant be allowed a medal, 
his zeal, energy and labors fully warranting the honor. 

After the occupation of Charleston, communications was established by signals with Fort 
Strong, on Morris Island, Fort Johnson and James Island, Mount Pleasant, and Steynmeyer’s 
Mills. A line was also opened with the position occupied by the troops on the south side of the 
Ashley river.” 

With regard to Confederate reading of Union visual signals. Brown makes the following ob' 
servations of considerable interest (p. 274): 

“The absolute necessity of using a cipher when signalling in the presence of the enemy was 
demonstrated during these autumn months by the ease with which the rebels read our messages. 

This led to the issuing of an order that all important messages should be sent in cipher. Among 
the multitude of messages intercepted by the enemy, the following were some of the more im- 
portant. . .” 
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Brown thereupon cites 25 such messages but he gives no indication whatever as to the source 
from which he obtained these examples or how he knew they had been intercepted. They all 
appear to be tactical messages sent by visual signals. 

In many of the cases cited by Brown it is difficult to teU whether wig-wag or electric tele- 
graph messages were involved. But in one case (evacuation of Charleston), it is perfectly 
dear that visual messages were involved, when Brown says that Sgt. Colvin “read all the mes- 
sages within sight.” 

Further with regard to rebel cryptanalytic success with Union messages. Brown has this to 
say (p. 213): 

“The reports of Lieut. Frank Markoe, Signal Officer at Charleston, show that during the siege 
thousands of messages were sent from one post to another, and from outposts to headquarters, 
most of which could have been sent in no other way, and many were of great importance to the 
Confederate authorities. 

Lieut. Markoe says that he read nearly every message we sent. He was forewarned of our 
attack on the 18th of July, 1863. He adds regretfully, however, that through cardessness of 
the staff officers at headquarters it leaked out that he was reading our messages. Our officers 
then began to use the cipher disk. In August he intercepted the following message: ‘Send me a 

copy of rebel code immediately, if you have one in your possession.’ He therefore changed his 
code. ... A little later our officers used a cipher which Lieut. Markoe says he was utterly un- 
able to unravel.’’ 

It is unfortunate that neither Lieutenant Markoe, the Confederate cryptanalyst, nor Brown, 
the Union signalman, teU us what sort of cipher this was that couldn’t be unravelled. I as- 
sume that it was the Myer disk used properly, with a key phrase of some length and with suc- 
cessive letters, not whole words, being enciphered by successive letters of the key. But this 
is only an assumption and may be entirely erroneous. 

In the foregoing citations of cryptanalytic successes it is significant to note that visual mes- 
sages were intercepted and read by both sides; second, that Confederate telegraphic messages 
protected by the Vigenfere cipher were read by Union personnel whenever such messages were 
intercepted; and third, that USMTC telegraph messages protected by the route cipher, ap- 
parently intercepted occasionally, were never solved. Later I shall make some comments on 
this last statement, but at the moment let us note that technically the Vigendre cipher is the- 
oretically much stronger than the route cipher, so that we have here an interesting situation, 
viz, the users of a technically inferior cryptosystem were able to read enemy messages protected 
by a technically superior one, but the users of a technically superior cryptosystem were not 
able to read enemy messages protected by a technically inferior one — a curious situation in- 
deed. 

I can hardly close this lecture without citing a couple of messages which appear in nearly 
every accovmt I’ve seen of the codes and ciphers of tiie Civil War. These are messages which 
were sent by President Lincoln xmder circumstances in which, allegedly, the usual cipher could 
not be or, at least was not, employed. The first of the two was sent on 25 November 1862 
from the White House to Major General Burnside, Falmouth, Virginia. The circumstances 
are so bizarre that if I merely presented the cipher message to you without some backgroxmd I 
doubt if you would believe me. And even after I’ve presented the backgroimd, I’m sine you 
won’t know what to think. I, myself, don’t really know whether to take the incident seriously 
or not. Let me quote from an account of it in the book by David Homer Bates, one of the 
first members of the USMTC, in his Lincoln in the Telegraph Office (Appleton-Century Co., 
New York, 1939, pp. 58-61): 

“During Burnside’s Fredericksburg campaign at the end of 1862, the War Department oper- 
ators discovered indications of an interloper on the wire leading to his headquarters at Aquia 
Creek. These indications consisted of an occasional irregular opening and closing of the circuit 
and once in a whUe strange signals, evidently not made by our own operators. It is proper to 
note that the characteristics of each Morse operator’s sending are just as pronounced and as 
easily recognized as those of ordinary handwriting, so that when a message is transmitted over 
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a wire, the identity of the sender may readily be known to any other operator within hearing 
who has ever worked with him. A somewhat similar means of personal identification occurs 
every day in the use of the telephone. 

“At the time referred to, therefore, we were certain that our wire had been tapped. In some way 
or other the Confederate operator learned that we were aware of his presence, and he then informed 
us that he was from Lee’s army and had been on our wire for several days, and that, having 
learned all that he wanted to know, he was then about to cut out and run. We gossiped with 
him for a while and then ceased to hear his signals and believed that he had gone. 

“We had taken measures, however, to discover his whereabouts by sending out linemen to pa- 
trol the Une; hut his tracks were well concealed, and it was only after the intruder had left that 
we found the place where our wire had been tapped. He had made the secret connection by 
means of fine silk-covered magnet wire, in such a manner as to conceal the joint almost entirely. 
Meantime, Burnside’s cipher-operator was temporarily absent from his post, and we had recourse 
to a crude plan for conceaUng the text of telegrams to the Army of the Potomac, which we had 
followed on other somewhat similar occasions when we believed the addressee or operator at the 
distant point (not provided with the cipher-key) was particularly keen and alert. This plan con- 
sisted prinuuily of sending the message backward, the individiial words being misspelled and 
otherwise garbled. We had practised on one or two dispatches to Burnside before the Confed- 
erate operator was discovered to be on the wire, and were pleased to get his prompt answers, 
couched also in similar outlandish language, which was, however, intelligible to us after a short 
study of the text in each case. Burnside and ourselves soon became quite expert in this home- 
made cipher game, as we all strove hard to clothe the dispatches in strange, imcouth garb. 

“In order to deceive the Confederate operator, however, we sent to Burnside a number of ci- 
pher messages, easy of translation, and which contained all sorts of bogus information for the 
piupose of misleading the enemy. Burnside or his operator at once siumised our purpose, and 
the general thereupon sent us in reply a lot of balderdash also calculated to deceive the unin- 
itiated. 

“It was about this time that the following specially important despatch from Lincoln was filed 
for traiosmission: 



Executive Mansion, Washington, 
November 25, 1862. 11:30 AM. 



MAJOR-GENERAL BURNSIDE, Falmouth, Virginia: If I should be in boat off Aquia 
Creek at dark to-morrow (Wednesday) evening, could you, without inconvenience, meet me and 
pass an hour or two with me? 

A. Lincoln. 



“Although the Confederate operator had said good-by several days before, we were not sure 
he had actually left. We therefore put Lincoln’e telegram in our home-made cipher, so that if 
the foreign operator were stiU on our wire, the message might not be readily made out by the 
enemy. At the same time extra precautions were taken by the Washington authorities to guard 
against any accident to the President while on his visit to Burnside. No record is now found 
of the actual text of this cipher-despatch, as finally prepared for transmission, but going back 
over it word for word, I believe the following is so nearly like it as to be called a true copy: 

Washington, D. C., November 25, 1862 

BURNSIDE, Falmouth, Virginia: Can Inn Ale me withe 2 oar our Ann pas Ann me flesh ends 

N. V. Com Inn out with U cud Inn heaven day nest Wed roe Moore Tom darkey hat Greek 
Why Hawk of Abbott Inn B chewed I if. BATES.’’ 

This sosrt of subterfuge is hardly worthy of becoming embalmed in the official records of the 
war — and apparently it wasn’t. But several years later, one of identical nature did become so 
embalmed, for the message appears on page 236, Vol. 45, of “Telegrams received by the Sec- 
retary of W^ar”: 

Hq. Armies of the U. S., City Point, Va., 

8:30 a. m., April 3, 1865 

TINKER, War Department: A. Lincoln iis in fume a in hymn to start I army treating there 
possible if of cut too forward pushing is He is so all Richmond aunt confide is Andy evacuated 
Petersburg reports Grant mo rning this Washington Secretary War. BECKWITH. 

Both Plum and Bates cite the foregoing telegram and their comments are interesting if not 
very iUmninating. Plum says merely: “By reading the above backward with regard to the 
phonetics rather than the orthography, the meaning will be apparent.” Bates says: 
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“The probable reason for adopting this crude form was to insure its reaching its destination 
without attracting the special attention of watchful operators on the route of the City Foint- 
Washington wire, because at that crisis every one was on the Qui vive for news from Grant’s ad- 
vancing army, and if the message had been sent in plain language, the important information 
it conveyed might have been overheard in its transmission and perhaps would have reached the 
general public in advance of its receipt by the War Department. 

“It is not necessary to g^ve the translation of this cipher-message. To use a homely term, 

‘Any one can read it with his eyes shut.’ In fact, the easiest way would be for one to shut the 
eyes and let some one else read it backward, not too slowly. The real wording then becomes 
plain.” 

Can you imagine for one moment that a “cryptogram” of such simplicity could not be read 
at sight by any USMTC operator, even without having someone read it to him backward? 
Such a “cryptogram” is hardly worthy of a schoolboy’s initial effort at preparing a secret mes- 
sage. But I assure you that I did not make this story up, nor did I compose the cryptogram. 

Ruminating upon what I have shown and told you about the cryptosystems used by both 
sides in the Civil War, do you get the feeling, as I do, that the cryptologic achievements of 
neither side can be said to add lustre to undoubtedly great accomplishments on the battlefield? 
Perhaps this is a good place to make an appraisal of the cryptologic efficiency of each side. 

First, it is fair to say that we can hardly be impressed with the cryptosystems used by either 
side. The respective Signal Corps at first transmitted by visual signals messages whoUy in 
plain language; such messages were often intercepted and read straight away. Then both sides 
began enciphering such messages, the Signal Corps of the Federal Army using a cipher disk in- 
vented by the Chief Signal Officer, the Signal Corps of the Confederate Army using the Vigendre 
cipher. In both cases the use of cryptography for tactical messages was quite inept, although 
it seems that from time to time the Federal signalmen had better success with the Vigen^- 
enciphered visual messages of the Confederate signalmen that the latter had with the disk- 
enciphered messages of the Union signalmen. 

With regard to the cr 3 q)tosystem used by the Confederate Signal Corps, although there may 
initially have been cases in which monoalphabetic substitution alphabets were used, such 
alphabets were probably drawn up by agreement with the signal officers concerned and changed 
from time to time. Nowhere have I come across a statement that the Myer disk or something 
similar was used. In any event, messages transmitted by visual signals were read from time 
to time by Union signalmen, the record showing a number of cases in which the latter “worked 
out the rebel signal code” — ^meaning, of course, that the substitution alphabet involved was 
solved. When did the Confederate Signal Corps begin using the Vigendre cipher? The 
answer seems to be quite clear. In a letter dated 6 Jime 1888 from General J. H. Alexander 
(brother of General E. P.) to J. Willard Brown^^ we find the following statements: 

“At the first inauguration of the Signal Service in the Confederacy, I, having received in the 
first place the primary instruction from my brother, Gen. E. P. A., then a colonel on Beaure- 
gard’s staff near the Stone Bridge at Manassas, was assigned the duty of preparing a confiden- 
tial circular of instruction for the initiation of officers and men, in this branch. I did prepare 
it, in Richmond, in early spring, 1862, and surrendered the copy to Hon. James A. Seddon, the 
then Secretary of War at Richmond. It was issued in form of a small pamphlet. I had at- 
tacked a table for compiling cipher dispatches — which was printed with the rest of the matter — and 
the whole was issued confidentially to the officers newly appointed for signal duty.^^ 

I have italicized the last sentence because I think that the “table for compiling cipher dis- 
patches” can refer only to the Vigenere square table, for that and only that sort of table is 
even mentioned in accounts of the ciphers used by the Confederacy. One could, of course, 
wish that the writer had given some further details, but there are none. However, the state- 
ment about the table is sufficiently explicit to warrant the belief that it was General J. H. 
Alexander who officially introduced the Vigendre square into Confederate cryptography, al- 
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though he may have obtained the idea from his brother, since he states that he “received in 
the first place the primary instruction from my brother.” 

In the Federal Signal Corps it is quite possible that the polyalphabetic methods Myer cites 
in his Manual for using his cipher disk (changing the setting with successive words of a mes- 
sage) were used in some cases, because there are found in the record several instances in which 
the Confederate signalmen, successful with monoalphabetic encipherments, were completely 
baffled. One is warranted in the belief that it was not so much the complexities introduced by 
using a key word to encipher successive words of the plain text as it was the lack of training and 
experience in cryptanalysis which hampered Confederate signalmen who tried to solve such 
messages. In World War I a German Army system of somewhat similar nature was regularly 
solved by Allied cryptanalysts, but it must be remembered, in the first place, that by 1914 
the use of radio made it possible to intercept volumes of traffic entirely impossible to obtain 
before the advent of radiotelegraphy; and, in the second place, would-be cryptanalysts of both 
sides in the Civil War had nothing but native wit and intelligence to guide them in their work 
on intercepted messages, for there were, so far as the record goes, no training courses in crypt- 
analysis on either side, though there were courses in cryptography and signaling. It would 
seem to cryptanalysts of 1961, a century later, that native wit and intelligence nevertheless 
should have been sufficient to solve practically every message intercepted by either side, so 
simple an d inefficient in usage do the cryptosystems employed by both sides appear today. 

No s 3 Tstem employed by the Federals, either for tactical messages (Signal Corps transmissions) 
or strategic messages (USMTC transmissions) would long resist solution today, provided, of 
coxurse, that a modicum of traffic were available for study. Although technically far less secure 
in actual practice than properly enciphered Vigenere messages, the route ciphers of the USMTC 
seem to have eluded the efforts of inexpert Confederate cryptanalysts. Ex-USMTC operators 
make the statement that none of their messages was ever solved and that the Confederates 
published intercepted messages in Southern newspapers in the hope that somebody would 
come forward with a solution; yet it must be remembered that those operators were Northerners 
who were very natiu-ally interested in making the achievements of the Union operators, both in 
cryptography and in cryptanalysis, appear more spectacular than they really were. And it is 
probable that they wrote without having made a real effort to ascertain whether the Con- 
federates did have any success. A “real effort” would have been a rather imposing under- 
taking then — as it stiU is, I fear. Now it must be presumed that if Confederate operators had 
succeeded in solving intercepted traffic of the USMTC they would have recorded the facts to 
their own credit. But in his seven volumes on the campaigns of Lee and his lieutenants, 
Douglas S. Freeman does not mention a single instance of interception and solution of tele- 
graphic messages of the Union. Perhaps Freeman was seeking 100% confirmation, which is 
too much to expect in a field of such great secrecy. This failure of the Confederate crypt- 
analysts is the more astonishing when we know that copies of the USMTC cipher books were 
captured and that, therefore, they must have become aware of the nature of the route ciphers 
used by the USMTC, unless there was a lack of appreciation of the value of such captures and 
a failure to forward the books to the proper authorities, who could hand them over to their 
experts. In those books the USMTC route ciphers would have been seen in their naive simpli- 
city, complicated only by the use of “arbitraries” or code equivalents, but hardly to the degree 
where all messages would be impossible to solve. It seems to me that there can be only four 
possible explanations for this failure to solve the USMTC route ciphers. Let us examine them 
in turn. 

First, it is possible that there was not enough intercept traffic to permit solution. But this 
is inadequate as an explanation. The route cipher is of such simplicity that “depth” is hardly 
an absolute requirement — a single message can be solved, and its intelligibility will be deter- 
mined to a large degree by the number of “arbitraries” it contains. Where there are many, 
only the dim outlines of what is being conveyed by the message may become visible; where 
there are few or even none, the meaning of the messages becomes fairly evident. But the abun- 
dant records, although they contain many references to intercepts, fail to disclose even one 
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instance of solution of a USMTC message. Thus we are forced to conclude that it was not 
the lack of intercept traffic which accounts for lack of success by the Confederates with USMTC 
messages, but some other factor. 

Second, the lack of training in cryptanalysis of Confederate cryptanalysts might have been 
the reason why Confederate signalmen failed to solve the messages. This sounds plausible until 
we look into the matter with a critical spirit. Solution of route ciphers requires little training; 
native wit and intelligence should have been sufficient. The degree of intelligence possessed 
by Confederate officers and men was certainly as high as that of their Union counterparts who 
were up against a technically far superior cryptosystem, the Vigen^re. We may safely con- 
clude that it was not lack of native wit and intelligence that prevented them from solving 
messages enciphered by the USMTC route ciphers. 

Third, it is possible that Confederate high commanders were not interested in communica- 
tion-intelligence operators or in gathering the fruits of such operations. Such an explanation 
seems on its face fatuous and wholely unacceptable. We know of the high estimate of value 
field commanders placed upon the interception and solution of tactical messages transmitted by 
visual signaling; but an appreciation of the extraordinary advantages of learning the contents 
of enemy communications on the strategic level may have been lacking. My colleague, Mr. 
Pishel, thinks that “intelligence consciousness” and “intelligence sophistication” were of a very 
low order in the Union Army, and of a markedly lower order in the Confederate Army. But to 
us, in 1961, to disregard the advantages of a possible reading of strategic messages seems al- 
most incredible, and 1 am inclined to discount this sort of explanation. 

Fourth, it is possible that Confederate cryptanalysts were far more successful in their efforts 
to solve USMTC transmissions than present publicly available records indicate; that Confed- 
erate commanders obtained great advantages from their communication-intelligence opera- 
tions; that they fully recognized the supreme necessity of keeping this fact and these advantages 
secret; and that the Confederate States Government adopted and enforced strict communica- 
tion-intelligence security regulations, so that the truth concerning these matters has not yet 
emerged. Let it be noted in this connection that very little information can be found in the 
public domain today about Allied cryptanalytic successes during World War I; and were it not 
for the very intensive and extensive investigations in the matter of the Japanese attack on Pearl 
Harbor on 7 December 1941, very little, if any, information would be known to the public about 
British and American successes in communication intelligence during World War II. Im- 
mediately following the capture of Richmond and before Confederate records could be removed 
to a safe place, a great fire broke out and practically all those records were destroyed. It is 
possible that tiiis is one of the reasons why the records of their commimication-intelligence 
successes have never come to light. But it is also possible that Confederate cryptanalysts kept 
their secrets to themselves. We know that the records possessed or taken by certain Confed- 
erate leaders have been gone over with great care and attention, but what happened to those 
retained by other Confederate leaders such as the Secretary of War Seddon, or his predecessor 
Judah P. Benjamin, who later became Secretary of State, and others? Here is a fascinating 
speculation and one which might well repay careful, painstaking research in the voluminous 
records of our National Archives. I shall leave the delving into those records to some of you 
young and aspiring professional cryptanalysts who may be interested in imdertaking such a 
piece of research. With this thought I bring this lecture to its close. 
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For a half century following the close of the Civil War, crj^tology in the United States 
enjoyed a period of hibernation from which it awoke at long last about 1914, not refreshed, 
as did Rip Van Winkle, but weaker. This is perhaps understandable if we take into account 
the fact that the United States was able to enjoy a long era of peace, broken only briefly by 
the short war with Spain in 1898. For ov^ three decades there was little or no need for crypto- 
graphy in the United States Government, except for the communications of the Department 
of State. The military and naval services apparently felt that in time of peace there was no 
need for either cryptography or crs^tanalysis, and since it looked as though the U.S. was 
going to enjoy peace for a long, an indeflnitely long time, those services did not think it neces- 
sary or desirable even to engage in theoretical cryptologic studies. Of course, the War Depart- 
ment and the Army stiU had those route ciphers and cipher disks described in the preceding 
lecture; the Navy Department and the Navy had cipher disks for producing simple mono- 
alphabetic ciphers; and the Depairtment of State had a code more-or-less speciflcally designed 
for its communications. Separated from Europe by the broad Atlantic, and mindful of General 
Washington’s policy of noninvolvement in the problems of European diplomacy, America 
followed the traditional and easy course of isolationism. The quarrels among the countries in 
Europe were none of our business, and America turned its back to them for a half century, un- 
interested and unconcerned. 

There was, however, in this long hibernating period in U.S. cryptology one episode of parti- 
cular interest. It concerned a Presidential election in which the circumstances paralleled the 
election of 1960, when the very small popular-vote majority of the Democratic candidate sug- 
gested a possible upset in the electoral college voting. The episode to which I refer here oc- 
curred nearly a century ago, in the Presidential election of 1876, in which Democratic candi- 
date Samuel J. Tilden was pitted against Republican candidate Rutherford B. Hayes. On the 
basis of early evening election returns Tilden seemed to be easily the winner. Indeed, just be- 
fore going to bed on election night, 8 November 1876, Hayes conceded the election to Tilden, 
and the newspapers next morning followed this leEid and reported a Tilden victory. But when 
final tallies began coming in they showed that the closeness of the popular vote made Tilden’s 
victory not so sure as his supporters had calculated, and they therefore began to become ap- 
prehensive about their candidate’s victory. Their apprehensions were valid because of our 
peculiar system of electing a president, peculiar because it is the electoral and not the popular 
vote whidi detenoines who is to be the next occupant of the White House as President. Two 
days after the people had voted, it became clear that Tilden would have 184 electoral votes, 
just one vote short of insuring victory, whereas Hayes would have only 163, thus needing 22 
more. The Tilden supporters began a frantic campaign to get that one additional vote they 
needed, and they didn’t hesitate to try every possible ruse to obtain it, including bribery, a 
rather serious piece of business and one obviously requiring a good deal of secrecy, especially 
in communicatioxs. Of course, many telegrams had to be exchanged between the Tilden head- 
quarters in New ifork City and confidential agents who had to be sent to certain states where 
one or more electoral votes could perhaps be piirchased; telegrams also had to be exchanged 
among those seen it agents in the field. About 400 telegrams were exchanged and some 200 of 
these were in cr;irptographic form. Communication difficulties caused two almost consum- 
mated bribery deals to fall through; and a third deal failed because the electors proved to be 
honest Republicais not susceptible to monetary temptation. The existence of these telegrams, 
however, remained unknown to the public for months. We shall come to them later. 

Despite the efforts of the Tilden supporters, the outcome of the election remained in doubt 
because four statss, Florida, South Carolina, Louisiana and Oregon, each sent two groups of 
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electors, an event not foreseen or provided for in Hie Constitution. A crisis arose and the 
country seemed to be on the verge of another civU war. By an Act of 29 January 1877, Congress 
created a special electoral commission to investigate and decide upon the matter of the dis- 
puted electoral votes in the four states. Recounts of votes in certain election precincts were 
made, sometimes aided by soldiers of the Federal Army. The commission voted in favor of 
the Hayes electors in each case, and having obtained the needed 22 electoral votes, Hayes 
entered the White House. 

It was only some months afterward that the telegrams to which I have referred were brought 
to light, and a situation arose which Congress felt it had to look into. Somehow or other, in 
the summer of 1878, copies of those telegrams had come into the possession of a Republican 
newspaper in New York, TTie Tribune. Interested only in ascertaining the truth, the editor 
put two members of his staff on the job, and they succeeded in solving those telegrams which 
were in cipher. 

Various books dealing with the political aspects of his intriguing story are available in 
public libraries, but those of you who are interested only in its cryptologic aspects will find 
excellent material in the following four documents: 

[1] “The Cipher Dispatches”, The New York Tribune, Extra No. 44, New York, (14 January) 

1879. 

[2] Hassard, John R. G., “Cryptography in Politics,” The North American Review, Vol CXXVIII, 

No. 268, March 1879, pp 315-325. 

[3] Holden, Edward S., The Cipher Dispatches, New York, 1879. 

[4] U. S. House Miscdlaneous Documents, Vol 5, 45th Congress, 3rd Session, 1878-79. 

The last-mentioned item, that put out by the Congressional House Committee which had 
been designated to conduct the investigation (and which was named “The Select Committee 
on alleged frauds in the Presidential Election of 1876”), is of special interest. In the course 
of the investigation, the Committee solicited the technical assistance of Professor Edward S. 
Holden, of the United States Naval Observatory in Washington, the author of the third item 
listed above, who 1 believe was a captain in the Navy and had specialized in mathematics. 
The Tribune had brought him into the picture by asking his help when solution seemed hopeless, 
but it turned out that Mr. John R. G. Hassard, the chief of 7%e Tribune staff, and his colleague. 
Colonel William M. Grosvenor, also of that staff, solved the ciphers independently and, in fact, 
shortly before Prof. Holden solved them, although it was the latter that the Congressional Com- 
mittee called upon to explain matters, as would only be natural under the circumstances. 

Professor Holden’s testimony, in which he set forth his solution of the nearly 200 cryptograms 
entered in evidence, is presented in the form of a letter to the Committee, dated 21 February 
1879. In it he described and explained all the cryptosystems used, together with their keys 
and full details of their application. In that letter. Professor Holden makes the following 
statement: “By September 7, 1878, 1 was in possession of a rule by which any key to the most 
difficult and ingenious of these [ciphers] could infallibly be found.” Most of the ciphers in- 
volved word transpositions and Holden worked out the ^ys but in this he had been anticipated 
by the Tribune cryptanalysts. There were in all 10 different keys, two for messages of 10, 15, 
. . . words, up to and including two for messages of 30 words. On the opposite page wfil be 
found the complete “Table of Keys.” 

You may be wondering why there are two transposition keys for each length of message 
from 10 to 30 words, in multiples of 5. The two keys constituting a pair are related to each 
other, that is, they bear a relationship which Mr. Hassard, one of the Tiibime cryptanalysts, 
termed “correlative,” but which we now would call an “endpher-decipher” or a “verse-inverse” 
relationship. Either sequence of a correlative pair of sequences may be used to encipher a 
message; the other can then be used to decipher the message. For example, key HI con- 
sists of the following series of munbers: 8-4-1-7-13 . , ., etc., and the correlative, key IV, is 
3-7-12-2-6 . . ., etc. A cipher message of 15 words can be deciphered either by (1) number- 
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Figure 70. 

ing its words consecutively and then assembling the words in the other 8-4-1-7-13, or by (2) 
writing the sequence 3-7-12-2-6 . . . above the words of the cipher message and then assem- 
bling the numbered words according to the sequence 1-2-3-4-5 .... Thus, there were, in 
reality, not ten different transposition keys but only five. In the case of each pair of keys, one 
of them must have been the basic sequence, the other the inverse of it, or at least some deriva- 
tive thereof. 

I suspect that the basic or “verse” sequences of numbers were not drawn up at random but 
were derived from words or phrases; and 1 think that they were the odd-numbered ones because, 
as you will notice, it is in the odd-numbered keys that the positions of sequent digits reflect 
the presence of an imderlying key word or phrase; this is not true in the even-numbered ke 3 rs. 
I have not seriously attempted to reconstruct the key words, but perhaps some of you may 
like to try and will succeed in doing so. 

In addition to transposition, this system involved the use of “arbitraries” to represent certain 
words, the names of important persons and places, numerals, etc. There were also a few nulls. 

Professor Holden adds some comments about this system which are worth quoting: 

“The essence of this ingenious and novel system consists in taking apart a sentence written in 
plain English (dismembering it, as it were) and again writing all the words in a new order, in 
which they make no sense. The problem of deciphering it consists in determining the order 
according to which the words of the cipher should be written in order to produce the original 
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“There is one way, and only one way, in which the general problem can be solved, and that 
is to take two messages, A and B, of the same number of words, and to number the words in each; 
then to arrange message A with its words in an order which will make sense, and to arrange the 
words of message B in the same order. There will be one order — and only one — in which the 
two messages will simultaneously make sense. This is the key.” 

Here, in a nutshell, we find the basic theory of solving transposition ciphers by anagramming 
messages of the same length, explained in a most sucdnct manner. 

It appears that Professor Holden, clever as he was, did not note the verse-inverse relation 
in each pair of sequences, or if he did, he failed to mention it in his testimony. However, 
Hassard [2] specifically points this out. 

There were enough messages in this system to make it possible to solve code words used, 
as well as to recognize a few nulls which were occasionally added to complicate matters. Hence, 
the most complicated of the cryptosystems involved in this bizarre political episode were 
solved. 

Another system used by the conspirators employed a biliteral substitution, that is, one in 
which a pair of cipher letters represents a single letter. This substitution was based upon a 
10 X 10 checkerboard. Apparently neither Professor Holden nor the Tribune cryptanalysts 
recognized the latter principle, nor did they find that the coordinates of the checkerboard 
employed a key phrase, nor did they realize that the same checkerboard, with numerical co- 
ordinates, was used for a numerical substitution alphabet in which pairs of digits represent 
letters of the alphabet. 

Here are two of the messages exchanged by the conspirators, one in the letter cipher, the 
other in the figure cipher. The messages are long enough for solution. Try to solve them, 
reconstruct the matrix and find the key phrase from which the coordinates of the matrix were 
derived. It should amuse you by its appropriateness. 

The message in letter cipher is as follows: 



Jacksonville, Nov. 16 (1876) 



Geo. R Raney, Tallahassee: 

PP YY EM NS HY YY PI MA SH NS YY SS IT EP AA EN SH NS 

SE US SH NS MM PI YY SN PP YE AA PI El SS YE SH AI NS 

SS PE El YY SH NY NS SS YE PI AA NY IT NS SH YY SP YY 

PI NS YY SS IT EM El PI MM El SS El YY El SS IT El EP 

YY PE El AA SS IM AA YE SP NS YY lA NS SS El SS MM PP 

NS PI NS SN PI NS IM IM YY IT EM YY SS PE YY MN NS YY 

SS IT SP YY PE EP PP MA AA YY PI IT L' Engle goes 

up tomorrow. 

(Signed) Daniel 

The example in figme cipher is as follows: 



Jacksonville. Nov. 17 (1876) 

S. Pasco and E. M. L'Engle: 

84 55 84 25 93 34 82 31 31 75 93 82 77 33 55 52 93 20 

90 66 77 65 33 84 63 31 31 93 20 82 33 66 52 48 44 55 

42 82 48 89 42 93 31 82 66 75 31 93 

(Signed) Daniel 

There were several other systems involved in this episode of political skullduggery, but I am 
going to have to pass them by because they hardly deserve attention in this brief history. I 
do, however, want to call your attention to the very dose resemblance between the word- 
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transposition ciphers characterized by Pro£sssor Holden as the “most difficult and ingenious” 
of the ciphers he solved, and the USMTC route ciphers described in the preceding lectiue. 
Yet, not only he but also the Tribune amateur cryptanalysts solved those ciphers without too 
much difficulty, even though they were technically more complex. I think their work on the 
Tilden ciphers clearly confirms my own appraisal of the weakness of the route ciphers used by 
the USMTC in the Civil War. 

After this digression into the realm of what may be called political cr 3 ^tology, let us now 
go on with our military cryptologic history. I have already told you that the Department of 
State used a code for cryptographic comm un ications in the years following the Civil War, but 
I do not know what it was like. It may even have been an adapation of some commerical 
code. But in an article entitled “Secret Writing,” which appeared in Century Magazine, Vol. 
LXXXV, November 1912, No. 1, a man named John H. HasweU, apparently at that time a 
code clerk in the Department, referred to a new code of the department in the following terms: 



“The cipher of the Department of State is the most modem of all in the service of the Govern- 
ment. It embraces the valuable features of its predecessors and the merits of the latest inven- 
tions. Being used for every species of diplomatic correspondence, it is necessarily copious and 
unrestricted in its capabilities, but at the same time it is economic in its terms of expression. It 
is simple and speedy in its operation, but so ingenious as to secure absolute secrecy. The con- 
struction of this cipher, like many ingenious devices whose operations appear simple to the eye 
but are difficult to explain in writing, would actually require the key to be furnished for the pur- 
pose of an intelligible description of it.” 

Only four years later a certain telegraph operator and code derk of the State Department 
proved how vulnerable the Department’s system of enciphered code really was. His name was 
Herbert O. Yardley (Fig. 71) and many of you may know a bit about him as the author of a 
famous or infamous book (depending upon whose side you’re on) entitled The American Black 
Chamber, published in Indianapolis by the Bobbs-MerriU Co. in 1931. So far as I know it is 
the only book which cannot legally be reprinted in the United States because a special law 
passed in 1934 makes it a criminal offense to do so. That is quite a story in itself, but I can- 
not tell it now. If you happen to own a copy of the first and only American edition, don’t 
let it get away from you, because you can only obtain another copy of it by a more-or-less 
“under the table” deal; but you may be able to purchase a British edition, or a trandation in 
French, in Japanese, or in other languages, for the book was sensational. But to return to 
that State Department cryptosystem, which was considered by HasweU as giving absolute 
secrecy and which was readily solved by Yardley, here is what appears on the cover page of 
Yardley’s 21 -page typewritten analysis and solution of the system: 



Note: 



THEORY AND PRACTICE OP ENCIPHERED CODE 
State Department Problems 
I. II, and III 

The following was written in March 1916 and, so far as I can learn, is the first successful 
attempt to solve a problem in enciphered code. 

H. O. Yardley 



Yardley was quite wrong in thinking that his was the first successful attempt to solve a 
problem in enciphered code, for in Europe more complicated cases were often solved, and I 
imagine that European cryptanalysts could have read, and perhaps did read. State Department 
messages as a more or less routine matter. I think I am warranted in assuming that what 1 
have just said is true because, in Europe, ciyptanal 3 rtic studies were going on apace during the 
years of American neglect of such studies. The turning point from neglect to a ren a i ssa nce 
of interest in cryptologic studies in Einrope is said by some authorities to have been about the 
year 1880; but we must confine omrselves for the most part to developments in America, in 
order to keep this lectmre within boimds of what can be told within a limited time. 

In our Navy it seems that simple monoalphabetic ciphers continued in use until the middle 
of the eighties, when several naval officers were designated to prepare a more suitable system. 
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Figure 71. 



based upon a code particularly designed for naval comnnuiications. The system they worked 
out was embodied in a very large codebook, 18" long, 12" wide and 2" thick, which had the 
official title The U. S. Navy Secret Code. There was also an accompanying but separate cipher 
book, alm ost as large, and designated as The Book of Key Words. In addition to these was a 
third large book called General Geographical Tables. The system was placed into effect on 1 
December 1887. Later I will show you a most historic message sent in that system of secret 
communication, which today impresses one as being extraordinarily clumsy and dow. 

In our Army, in the middle eighties, a code was also prepared. It is no pleasure to have to 
teU you that its composition and format hardly shed laurels upon those responsible for its re- 
production, because it was merely a simple and acknowledged adaptation of a commercially 
available small code for use by the general public, first published in 1870 with the title Tde- 
graphic Code to Ensure Secresy in the Transmission of Tdegrams. It had been compiled by the 
Secretary of the French Trans-Atlantic Telegraph Company, a man named Robert Slater, and 
it became known everywhere as “Slater’s Code.” As to tlie nature of the code, I will quote 
from Slater’s own “Short explanation of the mode of using this work,” in a sort of preface to 
the 2nd Edition: 

“It is a numbered Telegraphic Dictionary of the English language, of which each word beats 
a distinctive No. (from 00001 to 25000, with exactly 100 words per page), and the method of 
using it is by an interchange of Nos., in accordance with a private understanding between corres- 
pondents that a further No. is to be added to or deducted from the number in the code, of the 
word telegraphed or written, to indicate the real-word intended, thus a “Symbolic” or “Dummy 
Word” is telegraphed, the meaning of which can only be read by those who have the key to the 
secret of how many should be added to or deducted from the number in the Code, of the “Dummy 
Word” to find the word meant.” (Punctuation as in the original). 

Here we have a sentence of 116 words. Though it is rather long and a bit murky, I think 
you will gather its import. The system as thus far described is what we now call the additive 
or subtractive method. But in the detailed instructions Slater goes one step further and sug- 
gets that instead of telegraphing the code number resulting from addition or subtraction of a 
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key number, the word standing alongside tiie sum (or difference) of the mathematical opera- 
tion he sent as the telegraphic code word. Slater’s code must ha«re met with popular acclaim 
because by 1906 it was in its fifth edition. A copy of the second edition (1870), is in my col- 
lection. As for a copy of the very first edition, not even the Library of Congress has one, 
it’s that scarce. 

To get on with the story, in 1885 the War Department published an adaptation of Slater’s 
Code for its use and the use of the Army. Here is a picture of ibs title page, the only differ- 
ence between it and that of Slater’s Code being in the spelling of the woid “secrecy,” as you 
can easily see in the picture 1 show you next (Fig. 72). It would appear that the “compiler” 
of this code, Col. Gregory, was just a bit deficient in imagination, because not only did he merely 
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Figure 72. 



borrow the basic idea and format of Slater’s Code, but even when it came to esplaining and 
giving examples of enciphering the code groups, the Colonel used not only the identical rules 
but also the very same wording and even the very same type of examples of transformations 
that are found in Slater’s original. Let me show an example in Slater’s code side by side with 
the same example in Gregory’s: 
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■XAHFLIS. 



VI 



EXAMPLES. 



EXAHPIiE X, 

The Queen is the sttpreme power in the Realm. 

Add any number belonr 25000 (ay, for instance^) 5555 to 
the numbers opposite to thoa words it is desiied to transmit. 
Where the result exceeds 25000^ deduct that number, or, in 
other words, commence the alphabet again. 



Word to bft 
transiBiited. 


No. in 
VbcabnUry 


Plug 

5 S 5 S* 


Rcpfeiaatitis 
in vocabu1»y 


The 


22313 


27868 


Bounteous 


Queen 


18095 


23650 




l 9 


12370 




poiifyine 


the 


22313 


bounteous 


supreme 


2>9S3 


*7508 

SSOIf 


tnognphy 


(wwer 


17055 


tnnspsient 


in 

the 


11426 

22313 


16981 

2^ 


pwed 

boiunteous 


Realm 


18419 


23974 


yoke 



The message being transmitted: — 

Bounteous we^ P>ttifyi"g bounteous biography 
transparent posed bounteous yoie, 
the receiver reverses the operation, adding 25000 to the 
number where it it beiow that to be deducted. 



Bounteous 

wedge 

purifying 

bounteous 

biography 

transparent 

pined 

bounteous 

yoke 



1 

No m 


Umtig 


Voeabuloiy. 


SSSS* 


0x868 


22313 


23650 


1809s 




12370 

22313 


02508 

22611 


21953 

17056 


16981 


11426 


0X868 


22313 


1 23974 

1 


18419 



The 

Queen 

is 

the 

wpreme 



i;XA.MPLE I. 

tfar it apuuithment whereof death it the mariiiinm. 

Add any number below 9SOOO (say, for instance, 33!i3) 
to the nnnibers opposite to those words it is desired to 
transmit. Where the fpbiiU exceeds SiSOOO, deduct that 
number, or, in other words, commence the alphabet 
again. 



Word to bo 
transmitted. 


Number in 
vocabiilaty 


Pins xm. 


Rt‘pn*Bentiug 
ill vocabulary. 


W'ar 


8:t784 


87037 


Barker 


IM 


is:n:i 


l.'>70ii 


oratinn 


21 


00001 


03:km 


cairn 


pniiisbiiiriit 


17803 


81880 


soiisine 


wliereof 


8:1887 


87880 


begetting 


dvnth 


0C808 


095Ii5 


frequent 


is 


1837:1 


16700 


iivatinii 


the 


88*.t87 


‘AViiiO 


agape 


maximum 


14(i38 


17363 


liriggish 



The message being transmitted reails — 

Barter oratioa cairn touting begettiug frequent ovation 
agape priggitk, 

the receiver reverses the operation, aihting 83000 to the 
nnmlHT where it is below that to bo deducted. 



Wonl Number ill m Kppvcsenting 

teceirisl. roeabiilary. Ijn vocabulary. 



Barker 

ovation 

eairii 

sonsiiig 

begetting 

fbeiinent 

ovatiiin 



agape 

priggish 



punishment 
\\ hereof 
death 

IS 

the 

maximum 



Figure 73. 

You will note that Col. Gregory just couldn’t use same text for his examples of encipher- 
ment that Slater used, which was: “The Queen is the supreme power in the Realm.’’ In- 
stead he used the enigmatic text: “War is a punishment whereof death is the maximum.’’ ‘ 
AH the other methods and examples of encipherment in the two codes are practically iden- 
tical. Colonel Gregory gives credit in the following terms to a civilian aide in his great work: 
“The labor of compiling the new vocabulary has been performed by Mr. W. G. Spottswood.’’ 
What did the latter do? Well, Mr. Spottswood’s work consisted in casting out from Slater’s 
list such words as ABALIENATE and ABANDONEE and replacing them with such words as 
ABATEMENT and ABATIS. This sort of work must indeed have been arduous. I’m sorry to 
appear to be so critical of the performance of my predecessors in the construction of codes 
and code systems for War Department and Army usage, but I feel sure you will agree that 
more imagination and ingenuity could have been employed than were used by Colonel Gregory 
and Mr. Spottswood. 



wonder what that sentence means. It sounds sort of “anti-American” to me. Punishment to whom? 
To the soldiers and sailors and airmen who defend our country? If not to them, then to whom? To the 
people of a whole nation fighting for liberty? I just don’t understand the sentence. Do you? 
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Col. Gregory prepared a confidential letter addressed to Lieut. Genered Sheridan, “Com- 
manding Army of the U.S.,” to explain the advantages of the new code. But in this letter 
Col. Gregory quotes very largely from Holden’s little brochure [3] and deals almost solely 
with the ways in which additional security may be gained by changing the additives to the 
code niimbers in Slater’s Code. For example, for all messages sent in January add 111; for 
all messages sent in February add 222, in March 333, etc. Another suggested way: “Send 
out a simple message in ordinary English: Add 1437 to all ciphers until fiurther orders.” 

Believe it or not, this was the code that the War Department and the Army used during 
the Spanish-American War. It was apparently used with a simple additive, because in a copy 
in my collection the additive is written on the inside of the front cover. It is 777; perhaps it 
was the additive for the month of July, but the number 777 was written in ink, so it may have 
been the permanent additive for the whole of the war. In pages 41-42 of The American Black 
Chamber the author throws an interesting sidelight on this code system: 

“The compilation of codes and ciphers was, by General Orders, a Signal Corps function, but 
the war [1917] revealed the unpreparedness of this department in the United States. How much 
so is indicated by a talk I had with a high officer of the Signal Corps who had just been appointed 
a military attach^ to an Allied country. It was not intended that attaches should actually en- 
code and decode their own tdegrams, but as a part of an intelligence course they were required 
to have a superficial knowledge of both processes in order that they might appreciate the im- 
portance of certain precautions enforced in safeguarding our communications. 

When the new attach4, a veteran of the old Army, appeared, I handed him a brochure and 
rapidly went over some of our methods of secret communications. To appreciate his attitude, 
the reader should understand that the so-called additive or subtractive method for garbling a 
code telegram (used during the Spanish-American War) is about as effective for maintaining 
secrecy as the simple substitution cipher which as children we read in Poe’s The Gold Bug. 

He listened impatiently, then gn^owled: “That’s a lot of nonsense. Whoever heard of going 

to aU that trouble? During the Spanish-American War we didn’t do all those things. We just 
added the figure 1898 to all our figure code words, and the Spaniards never did find out about it.’’ 

Although The American Black Chamber abotmds with exaggerations and distortions, what the 
author tells about the inadequacies of United States codes and ciphers in the years just be- 
fore our entry into World War I are true enough, and Yardley’s impatience and satiric com- 
ments in this regard, it grieves me to say, are unfortunately fuUy warranted. 

During or perhaps shortly after the end of the Spanish-American War, the War Department 
must have begun to realize that there were shortcomings in the code based upon Slater’s Code, 
the one which was in current usage and upon which I have already dwelt. On 16 January 
1898 the publication of a new War Department Telegraphic Code was authorized by General 
Orders No. 9. The code was to be prepared under the direction of General A. W. Greely, 
then Chief Signal Officer of the Army. The cited General Order makes it quite clear that the 
War Department version of Slater’s Code was still in use, but the Western Union Telegraphic 
Code was to be used in connection with Slater’s until the new War Department Code was 
completed, which apparently was ready in December 1899, when Slater’s was withdrawn from 
use with this statement in General Orders No. 203: “By direction of the Secretary of War, 
the Telegraphic Code to Insure Secrecy in the Transmission of Telegrams, wiU on and after January 
15, 1900, only be used for correspondence in such cases as may be specially ordered by the 
Secretary of War.” On 12 December 1899 the new War Department Code was issued. Here 
is a picture of its title page (Fig. 74). It comprised a specially-compiled list of tables, words, 
phrases and sentences to which code numbers and code words were assigned for specific use in 
War Department and Army communications. The code numbers began with 78201 and went 
to 95286; the accompanying code words were foreign, outlandishly unusual real words, and 
artificial words, beginning with KOPERKIES, KOPERKLEURS, KOPERMOLEN, etc., etc., down 
through the L’s, M’s and ending with words such as NAZWEL6EN, NEANTHE, ^APELGELB, etc., 
etc. You may wish to know why the code numbers didn’t begin with 00000 and go to 99999; 
or why the code groups began with K and went for thousands and thousands of words down 
to N. The answer is that this brand new War Department Telegraphic Code was to be used. 
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as Slater’s Code was used, in conjunction with the Western Union Tdegraphic Code, a code of 
78,200 groups beginning with numerical code groups 00000 accompanied by literal code words 
beginning with BEERKAR, BEERKARREN, BEERMELD ... and going to KOOTJONGEN, KOOTKRUID, 
KOOTSPEL. Here is a picture of a typical page in this code (Fig. 75). 
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Figure 74. Figure 75. 

The introduction to this code explains this puzzling fact. 

“Through lack of time it has been impossible to incorporate in the War Department Telegraphic 
Code all desirable phrases, and in consequence the first 471 pages of the Western. Union Telegraphic 
Code now in use by the Army will continue in use as a supplementary code. This affords the Army 
the telegraphic use of 100,000 code words, of which numbers 1 to 78,201, inclusive, are in the 
Western Union Telegraphic Code and numbers 78,201 to 100,000 are in the War Department Tele- 
graphic Code.” 

It thus becomes clear that for several years the new War Department Code was to be used 
in conjunction with the commercially available large Western Union Tdegraphic Code. This 
was stated to be for the purpose of economy. For secrecy, the additive or subtractive method 
was to be used. The futility of such an old and simple method for achieving communication 
security needs no comment. I wish there were time to read you the instructions in that new 
War Department Tdegraphic Code as regards the use of these ciphers for secrecy. They are 
practically the same as those in the 1885 version of Slater’s Code and are unbelievably &tile, 
but what else could be expected when cryptology is relegated to a position in military science 
far inferior to that of teaching the use of a rifle or bayonet, subjects which are taught, as a 
rule, by experts? Why was cryptology left to inexperienced amateurs during all those years? 
Was it stupidity? No, just a lack of appreciation of the importance of secure co mmu nications 
in military operations — ^and a lack of enough people with the requisite know-how. 

How long this combination of two codes continued to be used I don’t know. Sometime 
during the years 1900 to 1915 this absurd system must have proved itself entirely imsatisfac- 
tory, for in 1915 another brand new War Department Telegraph Code was put out, under direc- 
tion of Brigadier General George P. Scriven, the Chief Signal Officer of the Army who suc- 
ceeded Greeley. Here is a picture of its title page (Fig. 76). The book bears no security 
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Figure 76. 



Figure 77. 



classification, for even as late as in 1915 there was no real or definite classification system for 
security purposes. The instructions recommended certain precautions. “The War Depart- 
ment Telegraph Code,” says paragraph 5 of the instructions, “while not absolutely confiden- 
tial, will be guarded with the greatest care and will never be out of the immediate possession 
or control of the officer to whom issued or of his confidential agent. Care will be taken to pre- 
vent theft, loss, use, or inspection except by those whose duties require them to employ the 
code. Special pains will be taken to prevent the code from falling into the hands of unauthorized 
persons or of the enemy.” 

This new code was intended, as was its predecessor, to serve two purposes: “First, secrecy, 
and second, economy. When secrecy is desired it is to be used as a cipher code, as is explained 
in subsequent paragraphs under ‘Enciphered Code.’ ” But there are no subsequent paragraphs 
in which this is explained. Apparently some change in this regard was decided, because I 
have seen, as a separate pamphlet, a set of cipher tables for use with this code. 

The code itself embodied some of the latest ideas of code compilation. It had over 113,000 
code groups, and these were both 5-figure groups and, for the first time, 5-letter groups. The 
latter embodied the principle of the 2-letter difference, but the instructions do not mention 
this fact and no permutation table was included in the code itself. The book has a very ex- 
tensive vocabulary of words, phrases, and sentences. Here is a picture of a typical page (Fig. 
77). 1 feel sure that a great deal of thought and effort went into the production of this code, 
but I must tell you two things about it. First, I must tell you that my immediate predecessor in 
the Office of the Chief Signal Officer told me, on my return from France in 1919, that that par- 
ticular edition of the War Department Telegraph Code had been printed in Cleveland by a com- 
mercial printer, and second, that when the United States became a belligerent in World War I 
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our British Allies found it desirable to notify the U.S. Government (through our G-2) that 
our War Department Tdegraph Code was not safe to use, even with its sux>erencipherment tables. 
The implications of this notification are rather obvious and hardly require comment. The 
compilation of a new code in 1917 was initiated, but this time the work was done within and 
under the direction of the Military Intelligence Division of the General Staff (G-2), and in 
particular within the section devoted to cryptanalysis. This undertaking, which indubitably 
was a direct affront to the Signal Corps of the Army, met with no objection, it seems, from 
that group; i)erhaps it deserved the intended insult because of its longstanding neglect of its 
clear responsibilities for cryptography and cr 3 q)tographic operations in and for the Army. 

We have noted how inadequately the Army and the War Department were equipped for 
cryptocommunications in the years from 1885 to 1915. Let us see how well equipped the 
Navy and the Navy Department were. For this purpose I have an excellent example and 
one of great historical significance and interest. You will recall my mention of the appoint- 
ment of a board of Navy officers to prepare a suitable cryptosystem for the Navy and I told 
you about the large basic vocabulary and tabular contents of the codebook and its accompany- 
ing two large books, one for enciphering the code groups, the other for geographical names. 
For the story we go back to the time of President McKinley, whose election brought Theodore 
Roosevelt, a former member of the Civil Service Commission, back to Washington as Assistant 
Secretary of the Navy. Teddy was an ardent advocate of military and naval preparedness. 
He forthrightly and frankly favored a strong foreign policy, backed by adequate military and 
naval strength — “speak softly but carry a big stick” was his now famous motto. He was 
looking forward, in fact, to forcing the ultimate withdrawal of the European powers from the 
Western Hemisphere. With vigor, he set to work to make the Navy ready. When the Bat- 
tleship Maine was blown up in Havana harbor, on 15 February 1898, Roosevelt sharpened 
his efforts. During a temporary absence of his chief. Navy Secretary John D. Long, he took 
it upon himself to initiate the preparations which he bad in vain tried to persuade the Secretary 
to make. He ordered great quantities of coal and ammunition, directed the assembling of the 
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Figure 78. 
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Fleet, and stirred the arsenals and navy yards into activity. On a miserably cold Saturday 
afternoon, ten days after the Maine was blown up, and still in the absence of Secretary Long, 
Teddy sat down and wrote out a cablegram to go to Commodore George Dewey, at Hong 
Kong. Here it is, with his bold signature at the bottom: 

That is the now historic message which alerted Dewey and which resulted in our taking 
over, imder U.S. protection in the war with Spain which was declared ten days later, the Philip- 
pine Islands. 

You will note .that the message bears on its face a security dassihcation, but the classihcation, 
“Secret and Confidential,” was crossed out. That must have been many years later, for those 
three words appear in the plain text of the deciphered and decoded cablegram. Here is a 
picture of the code cablegram with its strange and outlandish code words, as it was received in 
Hong Kong: 
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Figure 79. 

And now I show you the deciphered and decoded text, which I was fortunate in being able 
to produce by courtesy of the Chief of the Naval Security Group, who permitted me to consult 
and use the necessary code books which I found were still in Navy Security archives. To 
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THEODORE ROOSEVELT, ASST. SECRETARY OF THE NAVY, TO ADMIRAL DEWEY, HONG KONG, 

26 FEBRUARY I&98 

1 1 2 3 h 5 6_ 



2 


WASSERREIF PAUSATURA BADANADOS CENTENNIAL TITUBANDI LOSCHBANK 


3 


99055 62399 


11005 


16820 


90000 52390 


5 






003.168 209.000 


032.390 


5 


SECRET AND ORDER THE 


EXCEPT THE 


TO 




CONFIDENTIAL 


SQUADRON 


MONOCACY 


HONGKONG, 

CHINA 



2 


VOVETE 


OFFENSADO CtAlRAQUIEZ^**) FICARAZADO NUMERATURA SPOILABLE 


3 






59841 


21992 64004 


.. 56639 63607 


4 




982.425 


984.121 




045.863 983.607 












IT WILL BE 


5 


KEEP FULL 
OF COAL 


IN THE 
EVENT OF 


DECLARATION 
OF WAR 


SPAIN YOUR DUTY 

TO SEE THAT 



1 


13 — 


Ik 


15 16 12 la 


2 


APPILANTI 


DEFUGNERE DEHIDEVIL MONOSILABO ATOCHARON TACHONASEN 


3 


07319 


25545 


24980 56346 09599 87782 


4 




073.192 


5547525 980.563 460.959 987.782 



3 THE SPANISH 

SQUADRON 



DOES NOT ASIATIC AND OFFENSIVE 

LEAVE COAST THEN OPERATION(S) 



1 


IQ 


901 91 


2 


ALIENATOTEV*'/ 


CRENCHA SFARRWERKE 


3 


05655 


22099 S000 


4 


046.653 


209.983 HI 


5 


KEEP OLYMPIA 
IN PHILIPPINE UNTIL FURTHQi 
ISLANDS ORDERS 



LEGEND: I - Group Number. 

2 - Cable Word. 

3 - Cable Word No. 

4 - Code Number in Code. 

3 - Meaning. 

Correction necessary: The "A" is to be 

omitted. 

Correction necessary: Group was 

received as ALIENATTE. 



Figure 80. 



translate a message in the code then in use three steps are necessary. First, the cable words 
(the peculiar, outlandish words in line 2 — WASSERREIF, PAUSATURA, BADANADOS, etc.) are sought 
in the cipher book, and their accompanying cable-word numbers set down. WASSERREIF yields 
99055; PAUSATURA yields 62399, BADANADOS, 11005, etc. The next step is to append the 
first digit of the second cable-word number to the last digit of the first cable-word number to 
make the latter a six-digit number. Thus 99055 becomes 990556. The six-digit code group 
number, 990556, is then sought in the basic code book and its meaning is found to be “Secret 
and Confidential.” The transfer of the first digit, 6, of the second cable-word number, 62399, 
makes it become code-number 2399, to which must now be appended the first two digits of 
the third cable-word number, 11005, thus making the second code group of the code message 
239911, which is sought in the basic code book and yields the meaning “Order the squadron.” 
And so on. It’s painfully slow work, and I haven’t told you about some of the difficulties I 
encountered in the process, including having to refer to the third book, the General Geographical 
Tables. It took me at least an hour to decipher and decode this one relatively short Roosevelt 
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message. I feel sure a naval operation in World War II or in World War I, for that matter, 
could never have been executed before a message even as brief as the Roosevelt one could be 
deciphered and decoded by this cumbersome system, even if aU the digits had been transmitted 
and received correctly. Generally speaking, naval battles are fierce and quickly over. For 
instance, on 4 Jime 1942, between 10:24 and 10:26 a.m., the war with Japan was decided when 
the U.S. Pacific Fleet under Admirals Nimitz, Fletcher and Spruance won the Battle of Midway, 
in which the Japanese lost four fast carriers, together with their entire complement of planes, 
and almost all their first-string aviators. When our Navy entered World War I a much more 
practical system was put into effect, using a dpher device known as the NOB, standing for 
“Navy Cipher Box,” to encipher 5-letter groups of a basic code. 

We come now to European events of importance in this cryptologic history. During the 
decades from the end of the Civil War in America to the first decade of the 20th Century, 
there was some progress in cryptologic science in Europe, but it was not of a startling nature. 
German Army Major Kasiski’s demonstration of a straight forward, mathematical method of 
solving the Vigen^ cipher was published in Berlin during the mid-period of the Civil War in 
America. If the book created an impression in Europe, it was altogether unspectacular; in 
America it remained imheard of until after the advent of the 20th Century. Although Kasiski’s 
method is explained quite accurately in the first American text on cr 3 q>tology,‘ the name 
Kasiski doesn’t even appear in it. Other books on cryptologic subjects appeared in Europe 
during this period, and two of them deserve special attention. The first, by Commandant 
Bazeries, is a book notable not for its general contents, which are presented in a rather dis- 
organized, illogical sequence, but for its presentation of a cipher device invented by the au- 
thor, the so-called “cylindrical cipher device.” But our own Thomas Jefferson anticipated Ba- 
zeries by a century, and the manuscript describing his “Wheel Cypher” is among the Jefferson 
Papers in the Library of Congress. The second book which deserves special attention is one 
by another French crjnptologist, the Marquis de Viaris, in which he presents methods for 
solving cryptograms prepared by the Bazeries cipher cylinder, and although imknown to him, 
the ciphers of Jefferson’s Wheel C 3 q>her.® 

It was in the period during which books of the foregoing nature were written and published 
that the chanceries of European Governments operated so-called “Black Chambers,” organized 
for solving one another’s secret commxmicailons. Intercept was unnecessary because the 
governments owned and operated the telegraph systems, and traffic could be obtained simply 
by making copies of messages arriving or departing from telegraph offices or passing in transit 
through them. This was true in the case of every country in Europe with one very important 
exception: Great Britain. The story, which is given in detail in a recently published and 
very fully documented book,^ is highly interesting but I must condense it to a few sentences. 

In England, from about the year 1540 onward until 1844, there was a “black chamber” in 
constant operation. It was composed of three collaborating organizations within the Post 
Office respectively called “The Secret Office,” the Private Office,” and “The Deciphering 
Branch.” 

In the first of these carefully hidden secret organizations, letters were opened, copies of 
them were made, the letters replaced, the envelopes resealed, and if the wax seals were intact 
they were merely replaced. If the seals were not replaceable, duplicates were forged and af- 
fixed to the envelopes. Copies of letters in cipher were sent to the “Deciphering Branch” 



^Capt. Parker Hitt’s Manual for the Solution of Military Ciphers, Fort Leavenworth, Kansas: Army Service 

Schools Press, 1916. 

^L’art de chiffrer et d^chiffrer les d4p@ches secretes, Paris, 1893. 

*Ellis, Kenneth L. The Post Office in The Eighteenth Century: A Study in Administrative History. London: 
Oxford University Press, 1958, pp. 176. In conjunction with this book one should by all means also read the 
following extremely interesting and revealing article by the same author: “British Communications and 

Diplomacy in the Eighteenth Century,” Bulletin of the Institute of Historical Research, Vol. XXXI, No. 84, 
Nov 1958, pp. 169-167. 
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for solution and the results, if successful, were then sent to the Foreign Office. A famous 
mathematician, John Wallis, took part in the latter activities. The “Private Office” took 
care of similar activities but only in connection with internal or domestic communications. 
In 1844, a scandal involving these secret offices caused Parliament to close them down com- 
pletely, so that from 1844 until 1914 there was no black chamber at all in Britain. As a con- 
sequence, when World War I broke out on the first of August 1914, England’s black chamber 
had to start from scratch. But within a few months British brains and ingenuity built a 
crsrptologic organization known as “Room 40 O.B.”, which contributed very greatly to the 
Allied victory in 1918. Although the British Gk)vemment has never issued a single official 
publication on the activities and accomplishments of “Room 40 O.B.,” several books by pri- 
vate authors have pushed aside the curtain of secrecy to make a most fascinating story too 
long to teU in this lecture. But I must teU you at least something about what was perhaps the 
single greatest achievement of “Room 40 O.B.,” an achievement which just in the nick of 
time brought this country into World War I as an active belligerent on the Allied side and 
saved England from possible destruction, as well as France. The operation involved the 
interception and solution of a message known as the Zimmermann Telegram, deservedly 
called the most important single cryptogram in all history. On 8 September 1958 I gave before 
an NSA audience a detailed account of this amazing cryptogram. I told about its interception 
and solution; I told how the solution was handed over to the United States; how it brought 
America into the war on the British side; and how all this was done without disclosing to the 
Germans that the plain text of the Zimmermann Telegram had been obtained by interception 
and solution by cryptanalysis, that is, by science and not by treason. My talk was given 
under the auspices of the NSA Crypto-Mathematics Institute, was recorded, and is on file 
so that, if you wish, you can hear it. It took two and a half hours to deliver and at that I 
didn’t quite succeed in telling the whole story. But you may read an excellent account of 
this episode, set forth in great detail in a book entitled The Zimmermann Telegram, by Barbara 
Tuchman, published in 1958 by the Viking Press, New York. Also, you should consult a 
book entitled The Eyes of the Navy, by Admiral Sir William James, published in 1955 by Methuen 
& Co., London. Both books deal at length with The Zimmermann Telegram and tell how 
astutely Sir William Reginald Hall, Director of British Naval Intelligence in World War I, 
managed the affair so as to get the maximum possible advantage from the feat accomplished 
by “Room 40 O.B.” It was, indeed, astounding! To summarize, as I must, this fascinating 
and true tale of a very important cryptanalytic conquest, let me show you again the telegram 
as it passed from Washington to Mexico City, for if you will remember, I showed it to you in 
the very first lecture of this series, and promised to tell you about it later. Here I show it 
to you once again. As you can easily see, the code groups are composed of three, four, and 
five-digit groups, mostly the latter. Here is the English decoded translation of the message 
as transmitted by our Ambassador Page in London to President Wilson: 

‘Foreign OfSce Telegraphs Jan. 16, No. 1. Most secret. Decipher yourself. 

‘We intend to begin unrestricted submarine warfare on the first of February. We shall en- 
deavour in spite of this to keep the United States of America neutral. In the event of this not 
succeeding, we make Mexico a proposal of alliance on the following basis. Make war together, 
make peace together, generous financial support and an understanding on our part that Mexico 
is to reconquer the lost territory in Texas, New Mexico and Arizona. The settlement in detail 
is left to you. You wiU inform the President (of Mexico) of the above most secretly as soon as 
the outbreak of war with the United States of America is certain, and add the suggestion that he 
should, on his own initiative, invite Japan to immediate adherence, and at the same time mediate 
between Japan and oiuselves. Please call the President’s attention to the fact that the ruthless 
employment of our submarines now offers the prospect of compelling England, in a few months, 
to make peace. 

‘ZIMMERMANN.’ 

From the day that Ambassador Page sent his cablegram to President Wilson, on 28 February 
1917, quoting the English translation of the Zimmermann Telegram in the form in which it 
had been forwarded by German Ambassador von Bemstorff in Washington to German Minister 
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von Eckhardt in Mexico City, the entrance of the United States into the war as a belligerent 
on the side of the Allies became a certainty. Under big black headlines the English text ap- 
peared in our newspapers, because, after assuring himself of the authenticity of the telegram 
handed over by the British and that it had been decoded and checked by a member of Am- 
bassador Page’s own staff. President Wilson directed that the text of the message be released 
to the Associated Press. Its publication the next day was the first of a momentous and sensa- 
tional series of reports and accounts of the Zimmermann Telegram and its contents. 

There were plenty of members of Congress who disbelieved the story. But when Zim- 
mermann himself foolishly acknowledged that he had indeed sent such a telegram, disbelief 
changed quickly into most vehement anger. Thus, it came about that Americans in the 
Middle West and Far West, who had thus far been quite unconcerned about a War that was 
going on in Europe, thousands of miles away, and wanted no part of it, suddenly awoke when 
they learned that a foreign power was isaaking a deal to turn over some rather large slices of 
U.S. real estate to a then hostile neighbor across the southern border. They were aroused to 
the point where they, too, as well as millions of other Americans in the East, were ready to 
fight. Surely war would now be declared on Germany. 

Notwithstanding all the furor that the disclosure of the Zimmermann Telegram created in 
America, President Wilson stiU hesitated. He was still determined that America would not, 
must not, fight. It was not rnitil more than a month later, and after severed American ships 
were sunk without warning on 18 March, that a now fuUy aroused President got Congress to 
declare war on Germany and her allies. The date was 6 April 1917. 

In the War Department and in the Navy Department the pace set for preparing for active 
war operations quickened. It is difficult to believe, but I assure you that it was true, that 
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there was at the moment in neither of those departments, nor in the Army or Navy, any or- 
ganizations or technical groups whatever, either for intercepting enemy communications or 
for studying them, let alone solving such communications. There was, it is true, since the 
autumn of 1916, a very small group of self-trained tnyptanalysts, sponsored and supported 
by a private citizen named Colonel George Fabyan,^ who operated the Riverbank Laboratories 
at Geneva, Illinois. I served as leader of the group, in addition to other duties as a geneticist 
of the Laboratories. Riverbank, through Colonel Fabyan, had initiated and established an 
unofficial or, at most, a quasi-offidal relationship with the authorities in Washington, so that 
it received from time to time copies of cryptographic messages obtained by various and entirely 
surreptitious means from telegraph and cable offices in Washington and elsewhere in the U.S. 
At that period in our history diplomatic relations with Mexico were in a sad state, so that U.S. 
attention was directed southward, and not eastward across the Atlantic Ocean. Therefore, 
practically all the messages sent to Riverbank for solution were those of the Mexican Govern- 
ment. Riverbank was successful in solving all or nearly all the Mexican cryptograms it was 
given, usually returning the solutions to Washington very promptly. The great majority of 
them were of the Vigendre type but using mixed sequences with relatively long key phrases. 
Riverbank was also successful with certain other cryptograms which were concerned with the 
war in Europe, but I cannot deal with them now because there just isn’t time. Soon after the 
U.S. declared war on Germany, Colonel Fabyan established a school for training at Riverbank, 
and he invited the Services to send him Army and Navy officers to learn something about 
cryptology in formal comrses established for the purpose. Each course lasted about six weeks, 
full time. 

You may like to know what we novices used for training ourselves for this unusual task 
and what we used later on for training the student officers sent to us for cryptologic instruction. 
As regards our self-instruction training material, there wasn’t much available in Engli^, but 
among the very sparse literature there was that small book by Captain Parker Hitt, called 
Manual for the Solution of Military Ciphers, to which I referred earlier. Colonel Fabyan 
managed to get a copy of that Manual for us to study. The Signal Corps School was tihen 
one of the Army Service Schools, and there a few lectmes were given by two or three officers 
who, when World War I broke out in August 1914, took an interest in the subject of military 
CT 3 q)tography. They foresaw that sooner or later there would be a need for knowledge in that 
important branch of military technology. Capt. Hitt’s Manual was then, and stiU is, a model 
of compactness and practicality. Let me show you the title page of the first edition (Fig. 82). 

It was the succinctness of Parker Hitt’s Manual that caused us much work and perspiration 
in our self-training at Riverbank, but we later came to know and admire its author, whose 
photograph I now show you as he looked when he became a Colonel in the Signal Corps (Fig. 83). 

There was one other item of training literature which we also studied avidly. It was a very 
amnll pamphlet entitled An Advanced Problem in Cryptography and its Solution, and it too was 
put out by the Fort Leavenworth Press in 1914. Here is its title page (Fig. 84). You will 
note that its author was then 1st Lieut. J. O. Mauborgne; he advanced to become a Major 
General and Chief Signal Officer of the Army (Fig, 85). The “advanced problem” dealt with 
in that pamphlet was the Playfair Cipher, about which I shall say only that at the time Mau- 
borgne wrote about that particular cipher it was considered to be much more difficult than it 
is at present. 

Retiiming now to what Riverbank’s self-trained cryptanalytic group was able to do in a 
practical way in the training of others, there exist in NSA archives copies of the many exercises 
and problems prepared at Riverbank for this purpose. They are, I think, stiU of much interest 
as curiosities of U.S. cryptologic history. 

In Lecture II, I showed you a picture of the last of the several classes sent by the Army to 
Riverbank for training. It should be noted, and it gives me considerable pleasiure to tell you, 

’’Honorary title conferred by the Governor of Illinois for Fabyan’s participation as a member of the Peace 
Commissian that negotiated the Treaty of Portsmouth, which terminated the Russo-Jai>anese War in 1905. 
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that this instruction was conducted at Colonel Fabyan’s own expense as his patriotic contri- 
bution to the U. S. war effort. 1 can’t, in this lecture, say much more about this than that it 
involved the expenditure of many thousands of dollars, never repaid by the government — not 
even by income-tax deduction or by some decoration or similar sort of recognition. Upon 
completion of the last training course, I was commissioned a First Lieutenant in Military In- 
telligence, General Staff, and ordered immediately to proceed to AmericEoi General Head- 
quarters in France, where I became a member of a group officially referred to as the Radio 
Intelligence Section. But it was the German Code and Cipher Solving Section of the General 
Staff, a designation that was abbreviated as G— 2, A-6, GHQ-AEF. As the expanded desig- 
nation implies, the operations were conducted in two principal sections, one devoted to work- 
ing on German Army field ciphers, the other, to working on German Army field codes. There 
were also very small groups working on other material such as meteorologic messages, direction- 
finding bearings, and what we now call traffic analysis, that is, the detailed study of “the ex- 
ternals’’ of enemy messages in order to determine enemy order of battle and other vital intel- 
ligence from the study of D/F bearings, the direction, ebb and flow of enemy traffic, and 
other data sent back from our intercept and radio direction-finding operations at or near the 
front line in the combat zone. 

In connection with the last-mentioned operations you will no doubt be interested to see what 
is probably one of the earliest, if not the very first, chart in cryptologic history that shows the 
intelligence that could be derived from a consideration of the results of traffic analysis. Its 
utility in deriving intelligence about enemy intentions from a mere study of the ebb and flow 
of enemy traffic, without being able to solve the traffic, was of unquestionable value. Here’s 
that historic chart (Fig. 86), which I must tell you was drawn up from data based solely upon 
the ebb and flow of traffic in what we called the ADFGVX cipher,® a clever cryptosystem which 
was devised by German cryptographers and which was restricted in its usage to German High 
Conunand communications, principally those between and among the headquarters of divi- 
sions and army corps. Its restriction to such high command messages made a study of its 
ebb and flow very important. Theoretically, that cipher was extremely secure. It combined 
both a good substitution and an excellent transposition principle in one system without being 
too complicated for cipher clerks. Below is a diagram which wfil give a clear understanding of 
its method of usage. If you wish further details I suggest you consult documents available in 
the Cryptanalytic Literature Staff of the NSA Office of Training Services. In this lecture 
there is only time to teU you that although individual or isolated messages in the ADFGVX 
system then appeared to be absolutely impregnable against solution, a great many messages 
transmitted in it were read by the Allies. You may be astonished by the foregoing statement 
and therefore may desire some enlightenment here and now on this point. In brief, there 
were in those days three and only three different methods of attacking that cipher. Under 
the first method it was necessary to find, as the first step, two or more messages with identical 
plaintext beginnings because they could be used to uncover the transposition, which was 
the second step. Once this had been done, the cryptanalyst had then to deal with a substitu- 
tion cipher in which two-letter combinations of the letters A, D, F, G, V, and X represented 
single plaintext letters. The messages were usually of sufficient length for this purpose. Under 
the second method, two or more messages with identiced plaintext endings could be used to un- 
cover the transposition. This was easier even than in the case of messages with identiced 
beginnings. You might think that cases of messages with identical beginnings or endings 
would be rather rare, but the addiction to stereotypic phraseology was so prevalent in all 
German military communications that there were almost invariably foimd, in each day's 
traffic, messages with similar beginnings or ending, and sometimes both. Under the third 
method of solution it was necessary to find several messages with exactly the same munber of 
letters. This happened, but not often. This system first came into use on 1 March 1918, 



s Initially this cipher employed only the letters A, D, F, G, and X, for a matrix of 5 X 5; later, the letter 
V was added, for a matrix of 6 X 6, for the 26 letters of the alphabet plus the ten digits. 
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three weeks before the last and greatest offensive by the German Army. Its appearance was 
coincident with that of other new codes and ciphers. The number of messages in the AD- 
FGVX cipher varied from about 26 a day, when the system first went into use, to as many as 
about 150 a day at the end of two months. It took about a month to figure out a method 
of solution, and this was first done by a very able cryptanalyst named Capt. Georges Painvin 
of the French Army’s Cipher Biureau. 

The ADFGVX cipher was used quite extensively on the Western Front with daily changing 
keys during May and June of 1918, but then, for reasons somewhat obscure, the number of 
messages dropped very considerably. How many different keys were solved by the Allies 
during the four months from 1 March to the end of June? Not many — 10 in all; that is, the 
keys for only 10 different days were solved. Yet, because the traffic on those days was very 
heavy, about 50% of all messages ever sent in that cipher, from its inception to its discard, 
were read, and a great deal of valuable intelligence was derived from them. On one occasion 
solution was so rapid that an important German operation disclosed by one message was com- 
pletely frustrated. 



Although the ADFGVX cipher came into use first on the Western Front, it later began to 
be employed also on the Eastern Front, with keys that were first changed every two days but 
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later every three days. On 2 November 1918 the key for that and the next day was solved 
within a period of an hour-and-a-half because two messages with identical endings were found. 
A 13-pait message in that key gave the complete plan of the German retreat from Roumania. 

During the 8 months of the life of the ADFGVX cipher, solution depended upon the three 
rather special cases I mentioned. No general solution for it was thought up by the Allies 
despite a great deal of study. However, members of our own Signal Intelligence Service, in 
1933, devised a general solution and proved its efficacy. Pride in this achievement was not 
diminished when, in the course of writing up and describing the method, I happened to find a 
similar one in a book by French General Givierge {Cours de Cryptographie, published in 1925). 
Givierge was by then the head of the French Black Chamber which was called the “Deuxi^me 
Bureau,” corresponding to our “G-2.” 



Taulb— 1 —THE ALPHABETS FOR THE “WILHELM** CIPHER 



ABCDEFGHZJKLUNOPQRSTUVVXYZ 
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I^umben were exprosBod by the following letters bracketed between “Q*s”. 



1234567890 

HPJWDT7RAF 



Tho alphabet bepnning **SQRYV” was known ss Gie “A” alphabet, that beginning '*L0PW 
as tho alphabet, etc 

Messages numbered 1, 31, 61, eto , were deapborable by the 18 alphabets in the order 
“JYCEPQHCHPQGP”. 

Messages numbered 2, 82, 62, eto , wore decipherable by the 18 alpliabets in tho order 
«TBUULBNFKEQGC” 

Tho horizontal sequence obove the table u the {dain'tiat sequence The Tortical alphabet 
on the extreme left gives the arbitrary symbol hy which the different alphabets were known 
n ths 30 keys. Attached is a list of th«s M fcajs* 



Figure 87. 

The ADFGVX cipher was not the only one used by the German Army in World War I, 
but there will be time to mention very briefly only two others. The first of these was a poly- 
alphabetic substitution cipher called the “Wilhelm,” which used a cipher square with disar- 
ranged alphabets and with a set of 30 fairly lengthy key words. The cipher square is shown 
in Fig. 87. Just why the square contains only 22 rows instead of 26 is probably connected 
with the fact that German can get along very well with fewer than 26 letters. Certainly the 
rows within the square are not random sequences, as you can see, for the lettetrs within them 
manifest permuted arrangements in sets of five letters. In Fig. 88 is shown the keys used — 30 
of them. The key sequences seem to be composed of random letters but underlying them is 
plain text. I leave it to you to try to reconstruct the real square, if possible. You should be 
able to reconstruct the real keys, for the latter problem should be relatively easy. 
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It will be noticed that the same letter, as P, for instance, m key no. 1, is repeated four 
different times Agam, the E and Q and 6 v^luch occur m 1 occur also m 2 These facts 
pointed to the use in these 30 keja of intclligiblo German aords The arbitrary lotters, nhich 
the keys m their present form eontamed, represented a simple substitution This appeared 
from tlie frequency, for example, of G and the inseparable combinations NF and NA, N never 
appearing unless foUoued by F or A It was therefore extremely probable that these letten, 
orbitranly chosen to represent the 22 different alphabets, m reahty represented keywords m 
German text 

N was assumed to be the > alue of C, and P, H, and G, the most frequent letter which was 
never absent from any of tlic senes, E. This simple substitution was continued until familiar 
German syllables began to appear and finally the complete keywords tliemsdves. 

Figure 88. 



The other German Army cipher to be mentioned is the double transposition, an example of 
which is shown below. The process consists in applying the same transposition key twice to 
the same matrix, once horizontally and once vertically, as seen in this slide. Solution of the 
true double transposition usually depends upon finding two or more messages of identical 
length. (You will remember what I told you about Capt. Holden in this connection.) No 
general solution was known to the Allies dining World War 1, and messages of identical length 
were few indeed. But it happened that occasionally a German operator would apply only the 



Literal key: 
Derived numerical key: 



First transposition Second transposition 



BUREAU 

2 5 4 3 1 6 2 5 4 3 1 6 



ATTACK 
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0 T S D F T 


I L F 0 U R 




0 E L U K 0 




T R| 



Final cryptogram 



ATFKC NOOTU ADMNA SLPIT 
ERPUT 0 



first transposition, and when this fortunate situation occurred solution was easy, because the 
key thus recovered from the single transposition could be used to decipher other messages 
which had been correctly enciphered by the double transposition. Again, the .gtignnl Intelli- 
gence Service devised a general solution for the double transposition cipher, and during World 
War II we were able to prove that such ciphers could be solved without having to find two 
messages of identical length. I think the devising of a general solution for the true double 
transposition cipher represents a real landmark of progress in cryptanalysis. 
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We come now to the code systems used by the belligereats in World War I. And first, let 
us differentiate those used for diplomatic communications from those used for military com- 
mimications. What sorts did the German Foreign Office use? We have noted that the 
British Black Chamber, “Room 40 O.B.,” enjoyed astonishing success with the code used for 
the transmission of the Zimmermann Telegram. Excessive pride in German achievements in 
science, a wholly unjustified confidence in their communication cryptosecurity, and a dis- 
dain for the prowess of enemy cryptanalysts laid German diplomatic communications open to 
solution by the Allies to the point where there came a time when nothing the German Foreign 
Office was teUing its representatives abroad by telegraph, cable or radio remained secret from 
their cryptologic antagonists. For those of you who would like to learn some details, I refer 
you to the following monograph on the subject by my late colleague. Captain Charles J. Men- 
delsohn: Studies in German Diplomatic Codes Employed During the World War, Government 
Printing Office, 1937. Copies of it are available in the Office of Training Services. Says Dr. 
Mendelsohn: 

“At the time of America’s entrance into the war German Codes were an unexplored field in 
the United States. About a year later we received firom the British a copy of a partial recon- 
struction of the German Code 13040 (about half of the vocabulary of 19,200 words and 800 of 
the possibly 7,600 proper names). This code and its variations of encipherment had been in use 
between the German Foreign Ofilce and the German Embassy in Washington up to the time of 
the rupture in relations, and our files contained a considerable number of messages, some of 
them of historical interest, which were now read with the aid of the code book.” 

The vocabulary of the German diplomatic codes comprised about 189, pages each hav- 
ing 100 words or expressions to the page, arranged in two columns of 50 each, accom- 
panied by numbers from 00 to 99. In each colunm the groups were in blocks of 10. In 
the left-hand column, for instance, were the five blocks from 00-09, 10-19, etc., to 40-49. 
Then 50-59, 60-69, etc., were in blocks of 10 in the right-hand column. The pages in the 
basic code were numbered, and from this code several codes were made by the use of conversion 
tables. This enabled the original or basic code to serve as the framework for apparently un- 
related and externally distinguishable codes for several different communication nets. What 
the number of the basic code was is unknown, but we do know that from the code designated 
as Code 13040 came codes 5950, 26040, and others, derived merely by means of tables for 
converting the page numbers in the basic code into different page numbers in the derived code. 
These conversions were systematic, in blocks of fours. Thus, for example, pages 15-18 in 
code 13040 became pages 65-68 in code 5950, etc. Then there were tables for converting line 
numbers from one code into different line numbers in another version of the basic code, and 
this was done in blocks of 10. For example, the fifth block (penultimate figure 4) became the 
first (penultimate figure 0), and the 1st, 2d, 3d, and 4th blocks were moved down one place. 
The other five blocks (on the right-hand side of the page) were rearranged in the same maimer. 

It is obvious that codes derived in such a manner from a basic code by renumbering pager 
and shifting about the contents of pages in blocks can by no means be considered as being dif 
ferent and entirely unrelated codes, and once a relationship between two such codes was dis- 
covered, the two could be handled as equivalents of one another. Also to be mentioned is the 
fact that in certain cases numbers were added to or subtracted from the code numbers of a 
message, and this gave rise to what seemed to be still different codes. It was not difficult to 
determine the additive or subtractive and thus get to the basic code numbers. 

In none of the cases of codes mentioned thus far was there one that could be considered to 
be a randomized, “hatted,” or true two-part code, since the same book served for both encoding 
and decoding. However, the German Foreign Office later on did compile and use real two- 
part, truly randomized codes of 10,000 groups numbered from 0000 to 9999. One such code 
had as its indicator the number 7500. And that there were several others like it 1 have no 
doubt. 

When one reviews Dr. Mendelsohn’s monograph, one becomes overwhelmed by the multipli- 
city of the codes and variants threof used by the German Foreign Office. Some were basic 
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codes, but many were derivatives or superencipherments thereof. It is even hard to ascertain 
the exact number of different codes and superencipherment methods. Yet a great deal of the 
traffic in these codes was read. Considering the rather small number of persons on the crypt- 
analytic staff of G-2 in Washington and in the British counterpart organization in London, 
the British Black Chamber, one can only be astonished by the remarkably great achievements 
of these two collaborating organizations that worked on Glerman diplomatic codes during 
World War I. 

So much for German diplomatic secret communications. What about German military 
cryptocommunications? I have already mentioned several of the systems used, but these 
were developed two or more years after the outbreak of World War I. When World War 1 
commenced, the German Army was very poorly prepared to meet the requirements for secure 
communications. It seems that up until the Battle of the Marne in 1914 several Army radio 
stations went into the field without any provision having been made, or even foreseen, for the 
need for speedy and secure cryptocommimications. Numerous complaints were registered by 
German commanders concerning extensive loss of time occasioned by the far too complicated 
methods officially authorized for use and the consequent necessity for sending messages in the 
clear. Not only did this reveal intelligence of importance to their opponents, but, what is 
equally important, the practice permitted the British and the French to become thoroughly 
familia r with the German telegraphic procedures, methods of expression, terminology and 
style, and the knowledge gained about these items became of great importance in cryptanalysis 
when German cryptosystems improved. The German Army learned by hard experience 
something about its shortcomings in this area of warfare and not only soon began to improve 
but it did so to the point where we must credit the Germans with being the initiators of new 
and important developments in field military cryptography. In fact, the developments and 
improvements began not long after the Battle of the Marne and continued steadily until the 
end of the war. When on 11 November 1918 the armistice ended active operations, German 
military cryptography had attained a remarkably high state of efficiency. The astonishing 
fact, however, is that, although very proficient in cryptographic inventions, they were ap- 
parently quite deficient in the science and practice of cryptanalsrsis. In all the years since 
the end of World War 1 no books or articles telling of German success with AQied radio traffic 
during that war have appeared; one Austrian cryptanalyst, a man named Figl, attempted to 
publish a book on cryptanalysis, but it seems to have been suppressed. One could, of course, 
assume that they kept their successes very well hidden, but the German archives taken at the 
end of World War II contained nothing significant in regard to cryptanalsrsis during World 
War I, although a great deal of important information in this field during World War II was 
found. A detailed account of the cryptologic war between the Allied and German forces in 
World War II would require scores of volumes, but there is one source of information which 
I can highly recommend to those of you who would like to know more details of the crypto- 
logic warfare between the belligerents in World War I. That source is a book written and 
published in Stockholm in 1931 by a Swedish cryptanalyst, Yves Gyld4n, under the title 
Chifferbyraemas Insafser I Varldskriget TUI Lands, a translation of which, with some com- 
ments of my own in the form of footnotes, you will find on file in the Office of Training Serv- 
ices imder the title The Contribution of the Cryptographic Bureaus in the World War, Govern- 
ment Printing Office, 1936. 

In this lecture, however, we are principally concerned with German military cryptography 
during World War I, and since I have already told you something about the cipher systems 
that were used, there remain to be discussed the field codes. It was the German Army which 
first proved that the old idea that codebooks were impractical for use in the combat zone for 
tactical communications was wrong. They had two types of field codes: one which they 
called the SCHLUESSELHEFT but which we called the “three-number code,” the other 
which they called the SATZBUCH but which we called the “three-letter code”. The formra: 
was a small, standardized code with a vocabulary of exactly 1,000 frequently used words and 
expressions, digits, letters and syllables, etc., for which the code equivalents were 3-digit num- 
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bers. A cipher was applied only to the fbrst two digits of the code numbers and this cipher 
consisted of 2-digit groups taken from a 10 x 10 matrix for enciphering the niunbers from 00 
to 99. This table was called the GEHEIMKLAPPE or “Secret Key,” and here’s a picture of 
one (Fig. 89). The last digit of a code group remained unenciphered. Thus, code group 
479 would become 629. Each division compiled and issued its own secret key table, which was 
in two parts, or sections, of course, one for encipherment, the other for decipherment. The 
three-number code was intended for use in all forms of communication within, or to and from, 
a 3-kilometer front-line danger zone. Although this code was completed by the end of Janu- 
ary 1918, it was not distributed or put into use until the opening day of the last and greatest 
German offensive, 10 March 1918. Our code-solving section, through good fortune and care- 
ful attention, ascertained the nature of the new code, and a few groups in it were solved the 
very same day the code was put into effect, because a German cipher operator who was unable 
to translate a message in the new code requested and received a repetition in another code 
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Figure 89. 

which had been solved to an extent which made it possible to identify homologous code groups 
in both messages. The three-number code proved rather easy to solve on a da^y basis because 
only the encipher-decipher table was changed. Much useful intelligence was obtained from 
the daily solution of this key. 

The solution of the SATZBUCH, or three-letter code, however, proved to be a much more 
difficult problem. In the first place, it had a much larger vocabulary, with nulls and many 
variants for frequently used words, letters, ^Uables and numbers; in the second place, and what 
constituted the real stmnbling block to solution, was the fact that it was a true two-part ran- 
domized or “hatted” code; and in the third place, each sector of the front used a different edition 
of the code, so that traffic not only had to be identified as to the sector to which it belonged but 
also it was not possible to combine aU the messages for the purpose of building up frequencies 
of usage of code groups. Here is a typical page of one of these codes (Fig. 91). Working with 
the sparse amount of traffic within a quiet sector of the front and trying to solve a few mes- 
sages in this code was really a painfully slow, very difficult and generally discomraging experience. 
On my reporting for duty to Colonel Frank Moorman, who was Chief of the whole unit, 1 was 
asked whether 1 wished to be assigned to the cipher section or to the code section. Having 
had considerable experience with the solution of the former types of cryptosystems but none 
with the latter, and being desirous of gaining such experience, I asked to he assigned to the 
code-solving unit, in order to broaden by professional knowledge and practice in cryptology. 
Little did I realize what a painful and frustrating period of learning and training I had imder- 
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taken, but my choice turned out to be a very wise and useful one. If any of you would like to 
read about my experience in this area, let me refer you to my monograph, written in 1918-19, 
entitled Field Codes Used by the German Army during the World War, copies of which are on file 
in the Office of Training Services. I will quote the last two paragraphs from my “estimate of 
the three-letter code” (on p. 65 of that monograph) and will remind you that although they 
were written over 40 years ago they are stiU applicable: 

“In the light of this limited experience (of less than six months with the 3-letter code) it is 
impossible to say absolutely what the degree of security offered by such a highly developed sys- 
tem really is. There is no doubt but that it is very great. There is no doubt but that, with 
the proper precautions, careful supervision and control the employment of such a code by 
trained men offers the highest possible security for secret communication on the field of battle. 

But no code, no matter how carefully constructed, wiU be safe without trained, intelligent 
personnel. A poorly constructed code may be in reality more safe when used by an expert than 
a very well constructed one when used by a careless operator, or one ignorant of the dangers of 
improperly encoded messages. This point cannot be overemphasized. It is hardly necessary 
to point out, therefore, that the proper training of the personnel which is to be put in charge of 
the work of coding messages is an essential requisite to the maintenance of secrecy of operations, 
and thus of success on the field of battle.’’ 

So much for the German Army field codes, about which a great deal more could be said, but 
we must hurry on to the cryptosystems of some of the other armies in World War I. 

What sorts of crsrptosystems did the French Army use? First, as for ciphers, they put 
much trust in transposition methods, and here is an example of one type (Fig. 91). Perhaps 
you remember one of those special route ciphers I showed you in the preceding lecture, the 
one with the diagonal that produced complexities that made the use of that route too difficult 
for the cipher operators of the USMTC. This French transposition cipher was much more 
complicated by those diagonals, and I wonder how much use was made of it by the French. 

As for codes, like the Germans, they used a small, front-line booklet called a “Carnet R4duit,” 
or an “Abbreviated Codebook.” Various sectors of the front had different editions, and I show 
you now a picture of one of them (Fig. 92). Then, in addition, there was a much more 
extensive code which was not only a two-part, randomized book of 10,000 four-digit code 
groups but a superencipherment was applied to the code messages when transmitted by radio 
or by “TPS,” that is “telegraphie par sol,” or earth telegraphy. Here is one of the tables 
used for enciphering (and deciphering) the code groups (Fig. 92), and here is the example of 
superencipherment given in the French code in my collection (Fig. 93). 

You will notice that the enciphering process breaks up the 4-digit groups in a rather clever 
manner by enciphering the first digit of the first code group separately; the second and third 
digits of the first group are enciphered as a pair; then the last digit of the first group and the 
first digit of the second code group are enciphered as a pair, and so on. This procedure suc- 
ceeds in breaking up the digital code groups in such a manner as to reduce very greatly the 
frequency of repetition of 4-digit groups representing words, numbers, phrases, etc., of very 
common occurrence in military messages. My appraisal of this French Army field crypto- 
system is that, theoretically at least, it certainly was the most secure of aU the field systems 
used by the belligerents. 

Now how about the cryptosystems used by the British Army? First, they used the Play- 
fair Cipher, a system of digraphic substitution considered in those days to be good enough for 
messages in the combat zone. But today, of coiuse, its security is known to be so low fliat it 
hardly merits confidence for serious usage. The British also used a field code. It contained 
many common military expressions and sentences, grouped under various headings or cate- 
gories, and, of course, a very small vocabulary of frequently used words, numbers, punctua- 
tion, etc. It was always used with superencipherment, the nature of which was not disclosed 
even to us, their Allies, so I am not in a postion to describe it. We did not even have a copy 
of their code — only a typewritten transcript which was furnished us quite reluctantly. This 
next slide was made by setting up in print a typical page thereof (Fig. 95). 
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As for the Italians, the general level of cryptologic work in Italy during the period was quite 
low, a fact which is all the more remarkable when we consider that the birthplace of modem 
cryptology was in Italy several centuries before. There appears to have been in Italy a greater 
knowledge of cr 3 q>tologic techniques in the 15th and 16th Centuries than in the 16th, paradoxi- 
cal as this may seem to us today. Perhaps this can be considered as one of the consequences 
of the need for secrecy which requires filing away in dusty archives records of cryptanalytic 
successes; but it is to be considered also that this prevents those who might have a flair for 
cryptologic work from profiting from the progress of predecessors who have been successfril 
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in such work. We should not be too astonished to leam, therefore, that when Italy entered 
World War 1 the Italian Army put its trust in a very simple variation of the ancient Vigen^ 
cipher, a system called the “cifrario militare tascabile” or the “pocket military cipher” (Fig. 
96). It, as well as several others devised by the same Italian “expert,” were solved very easily 
by the Austrian cryptanalysts during the war. The Italian Army also used codes, no doubt, 
but since encipherment of such codes consisted in adding or subtracting a number from the 
page number on which a given code group appeared, the security of such systems was quite 
illusory. As late as in 1927 the same Italian “expert” announced his invention of an absolutely 
indecipherable cipher system which, Gyld4n says (p. 23) “stiU further demonstrates the aston- 
ishing lack of comprehension of modem cryptanalytic methods on his part.” 

As regards Russian cryptographic work, it is known that there was, during the era of the 
last of the Czarist rulers, an apparently well organized and effective bureau for constmcting 
and compiling diplomatic codes and ciphers, which had been organized by a Russian named 
Savinsky, formerly Russian Minister to Stockholm. He saw to it that aU codes and cipher in 
use were improved; he introduced strict regulations for their use; and he kept close watch over 
the cryptographic service. He also was head of a cryptanalytic activity, and it is known that 
Turkish, British, Austrian and Swedish diplomatic messages were solved. After the Bolshevik 
revolution of 1916, some of the Russian cryptanalysts managed to escape from their homeland, 
and I had the pleasure of meeting and talking with one of the best of them during his service 
with one of our Allies in World War II. He is no longer alive, but I vividly recall that he wore 
with great pride on the index finger of his right hand a ring in which was mounted a large mby . 
When I showed interest in this unusual gem, he told me the ring had been presented him as a 
token of recognition and thanks for his cryptanalytic successes while in the service of Czar 
Nicholas, the last of the Une. 
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• COWFIDEyriAL 



But the story is altogether different as regards cryptology in the Russian Army. The Mili- 
tary Cryptographic Service was poorly organized and, besides, it had adopted a cryptographic 
system whidi proved to be too complicated for the poorly trained Russian cipher and radio 
operators to use when it was placed into effect toward the end of 1914. Here is a picture of 
that cipher (Fig. 97), which was composed of two tables, one arranged for convenience in en- 
ciphering and the other arranged for convenience in deciphering. In the enciphering table the 
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1*1^ tableau ri-coiitre a pour objet clc permeUrr, a defaut de comma- 
nicaUon par lil , la transmission par T« S. F. de tnu^ messages chiflr^s 
avec le Code chilTre, sans <|ue soit misp en danger la s^uritd de ce 
Code. 



On doit faire cmplm de ce double chifTrement pour les messages tele- 
phones i|ui seraient iKirtieulimment secrets ou importants. 

Exemple de double ckiJjTemeni 

Tbxtr . La reieve au - rA lieu demain matin. 

Code ; ilbali 4|a7.3 olSfija dlyajo ilorila 7|35|3 



Tableau . Rh|br| AO |n0| AH |i!b| TR |bu| GA |hi| BI |is|s1 

(Le premier chilTre du premier gmu|>e d«iit constituer aeul la premiere 
tranche. ) 



Pour le (lechilTrcinent, remplacer cluque grou|ie de deux lettres par 
ie nombre qiii correspond a f e groupc dans le lahlcaii dc chidrement. 

On retniu\e les gmupcs du C<tde en n^tahlissant les nomhres de 
quatre chilTres a parlir du oiiiimi iKvinent 



Ne jamais trmismetlre deux fois iin memo loxte dans dos chilFremonts 
difUrenls. 
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letters of the Russian alphabet (33 in aU) appear in the topmost row of characters, the 2-digit 
groups, in random order within each of the 8 rows below the top row, are their cipher equiva- 
lents. These rows therefore constitute a set of 8 cipher alphabets, these alphabets being pre- 
ceded by key numbers from 1 to 8 in random order. Both the cipher equivalents and the in- 
dicators were subject to change. Indicators were used to tell how many letters were enciphered 
consecutively in each alphabet, the indicator consisting of one of the digits from 1 to 9 repeated 
five times. The alphabets were then used in key-number sequence, enciphering the first set of 
letters (5, 7, etc., according to the indicator) by alphabet 1, the next set by alphabet 2, and 
so on. After the 8th set of letters, which was enciphered by cipher alphabet 8, one returned 
to cipher alphabet 1, repeating the sequence in this manner until the entire message had been 
enciphered. In enciphering a long message the cipher operator could change the niunber of 
letters enciphered consecutively by inserting another indicator digit repeated five times and 
then continuing with the next alphabet in the sequence of alphabets. The cipher text was 
then sent in 5-digit groups. The use of the deciphering table hardly requires explanation but 
this question may be in order: Why the aversion to the use of zero and to the use of double 
digits such as 11, 22, 33, etc.? This probably was thought to be helpful to the telegraph opera- 
tors as well as to the cipher clerks in straightening out errors in transmission and reception. 

I have told you that this cipher system proved too difficult for the Russians to use, and 1 
think you can see why. It was so difficult that messages had to be repeated over and over, 
with great loss of time. It is well known to all historians by this time that the Russians lost 
the Battle of Tannenberg in the autumn of 1914 largely because of faulty communications. 
Poor cryptography and failure to use even the most simple ciphers properly on the field of 
battle, and not brilliant strategy on the part of the enemy, was the cause of Russia’s defeat in 

Russischer SprungclilflVe. 

a. Chlflraitt. 

» .1 0 u r ,1 0 :ii .) II K .1 ji II 0 II i> !• T 1 i|> \ it 'i lu m 1 id n i> i> M It i 
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131 2181 79 42 56 72 26 83 27 37 61 89 43 28 23 97 13 29 59 36 32 38 73 63 24 64 85 4117 25 51461 

4 15 37 2164 3117 67 25 49 6918 23 35 93 59 86 52 13 46 89 74 98 28 47 7242 45 24 48 87 34 65 39 4 

5 86 92 52 2318 97 36 13 46 67 54 7119 14 65 27 93 85 16 7912 58 76 48 83 34 26 74 62 38 37 29 81 5 
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741 648443 92 53 85 34 67 71 27 2646 49 24 58 31 75 18 23 98 29 62 39 42 51 95 65 17 96 1391 94 7 
812 5682741338965461378326496839 ^ 57 16 23 95 48 31 78 1759 73 14 7298 52 4153 69 8 
2 73 86 31 9342 56 21 6219 47 75 61 32 59 28 84147135 91 87 69 16 13 25 76 89 38 64 94 95 83 29 2 
• abwgdezezeiklranoprstufhc5S Scjer ju ja g' i y • 

B 

b. Dechlftrant. 
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that and in subsequent battles. The contents of Russian commumcations became known to 
the German and Austrian High Commands within a few hours after transmission by radio. 
The disposition and movements of Russian troops and Russian strategic plans were no secrets 
to the enemy. The detailed and absolutely reliable information obtained by intercepting and 
reading the Russian communications made it very easy for the German and Austrian com- 
manders not only to take proper counter measures to prevent the execution of Russian plans 
but also to launch attacks on the weakest parts of the Russian front. Although the Russian 
ciphers were really not complicated, their cipher clerks and radio operators found themselves 
unable to exchange messages with accuracy and speed. As a matter of fact, they were so inept 
that not only were their cipher messages easily solved but also they made so many errors that 
the intended recipients themselves had considerable difficulty in deciphering the messages, 
even with the correct keys. In some cases this led to the use of plain language, so that the 
German and Austrian forces did not even have to do anything but intercept the messages and 
translate the Russian. To send out dispositions, impending movements, immediate and long- 
range plans in plain language was, of comrse, one cardinal error. Another was to encipher only 
words and phrases deemed the important ones, leaving the rest in dear. Another cardinal 
error, made when a cipher was superseded, was to send a message to a unit that had not yet 
received the new key and, on learning this, to repeat the identical message in the old key. 
I suppose the Russians in World War I committed every major error in the catalog of crypto- 
criminology. No wonder they lost the Battle of Tannenberg, which one military critic said 
was not a battle but a massacre, because the Russians lost 100,000 men in the 3-day engage- 
ment, on the last day of which the Russian commander-in-chief committed suidde. Three 
weeks later another high Russian commander followed suit, and the Russian Army began to 
fall apart, completely disorganized, without leadership or plans. Russia itself began to go 
down in ruins when its Army, Navy and Government failed so completdy, and this made 
way for the October revolution, ushering in a regime that was too weak to put things together 
again. The remnants were picked up by a small band of fanatics with military and adminis- 
trative ability. By treachery, violence and cunning, they wdded together what has now be- 
come a mighty adversary of the Western World, the USSR. 

I have left to be treated last in this lecture the cr 3 q)tosystems used by the American Expedi- 
tionary Forces in Europe during our partidpation in World War I. 

When the first contingents of the AEF arrived in France in the summer of 1917, there were 
available for secret communications within the AEF but three authorized means. The first 
was the extensive code for administrative telegraphic correspondence, the 1915 edition of the 
War Department Telegraph Code about which I’ve already told you something. Although it 
was fairly well adapted for that t 3 rpe of communication, it was not at all suitable for rapid and 
efficient strategic or tactical communications in the field, nor was it safe to use without a 
clumsy superencipherment. The second cryptosystem available was that known as the re- 
peating-key cipher, which used the Signal Corps Cipher Disk, the basic principles of which were 
described as far back as about the year 1500. The third system available was the Plasdair 
Cipher, which had been frankly copied from the British, who had used it as a field cipher for 
many years before World War I and continued to use it. In addition to these authorized 
means there were from time to time current in the AEF apparently several — ^how many, no 
one knows — unauthorized, locally improvised “codes” of varying degrees of security, mostly 
nil. I show one of these in this slide (Fig. 98) and will let you assess its security yourself. 

Seen in retrospect, when the AEF was first organized it was certainly unprepared for han- 
dling secret communications in the field; but it is certain that it was no more unprepared in 
this respect than was any of the other belligerents upon their respective entries into World 
War I, as I’ve indicated previously in this lectiue. This is rather strange because never be- 
fore in the history of warfare had cryptology played so important a role as a consequence of 
advances in electrical communications technology. When measured by today’s standards it 
must be said that not only was the AEF on its arrival in Europe wholly unprepared as to secret 
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Headquarter* 

62nd Infantry Brigade 
26tb Bivlelon 

A.E.P. 



Franoe, 17 ^rll 1918« 



BDLLESZH 

Vo. 1 



The following oode for oonmunicatlons between CoByanies. Battalions. 
Reglinenta and Headquartera S2nd Infantry Brigade will be effective IB April 
1918, 12 o'clock. 

CASOAMIES 

K1LI£D Strim out 

SERIOUSLY WOOBSED Base on balls 

SLIG HTLY VODHSED. Hit by pitched ball 

ACCIBESAIXY .BalKK 

mSSXHO.... ...............Tut outs 

COlOaSSlOSED OFFICER Itajor 

SHL13TED 210. .......................... .2Unore 



CAPTURES 

HAVE TAloar (Hoi PRISOEESS Stolen B*aea_ 

Hqve Lest (MC> .FRISOMERS..* Left on Boaes. 

HAVE LOST 2IACH1HE GUMS Error* 

HAVE TAKO HACHTHB GD88 Asslata 



WE WERE BQMBARHED BY UIIOIWTERFEBS ............ ...Jobna on using spit ball 

WE BCBIBARHED WITH TRENCH ....Leonard using Slow ball 

WE BQUBABSED WITH STOKES HORTABS .....Leonard using spit ball 

WE BQUBARDSD WITH 97 U.ll. CANON..... ............ .Leonard using * curve 

FZBED OH BY 0IACB19E GUNS. ....................... .Johnson using fast ball 

FI RED W I TH M ACHINE GUNS. ........................ .Leonard using fast ball 

WE WEBE UNDER BOUBABDUENT ...Wagner at bat 



WE WERE UNDER HEAVY BOUBARnilEllT..... ........... ..Wagner knocked * home n'n 

WE WERE UNDER llOHERATS BCOABncolT .Wagner trlplpd 

WE WERE UNDER LIOTT BOUBARDKENT**................ Vagner doubled 

WE WERE BOMBARDED WITH GAS.... WOgner singled 

EHEUY H EGIST RATION FIBE... wagner bunted 

WE Cobb at bat 

WE BOUBABDED HEAVILY...... . ...........C obb knocked a hone run 

WE BOliBABDED 2K)DE3iATELY,. Cobb tripled 

WE BOUBABDED Cobb doubled 

WE BOUBABDED WITH GAS Cobb alggled 

BEGISTBATIQN FIRE (OURS) .Cobb bunted 

BARRAGE REQUESTED FIKlU£i| f anned 

CUR ARTILLERY LAID DOWN A BABBAGE Sant la a pinch Ml tax 



NO UNUSUAL TRENCH SVEETS 

QUIET DAY. 

ACTIVE DAT 

THE SKEUY IS DOING TRQICH WORK at. 
WE ABE DOING TRENCH WORK at 



.Gama called, raJn 
.Gama called darlaess 
.Extra Inning gf.ux 
.Ha la wa'TDjng xip 
.Wa are warming up 
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comnmmcation means and methods and as to cryptanalysis, but for a limited time it seemed 
almost hopeless that the AEF could catch up with the technical advances both sides had made, 
because their British and French allies were at first most reluctant to disclose any of their 
hard-earned information about these vital matters. 

Nevertheless, and despite so inauspicious a commencement, by the time of the Armistice 
in November 1918, not only had the AEF caught up with their allies but they had surpassed 
them in the preparation of sound codes, as may be gathered from the fact that their allies had 
by then decided to adopt the AEF system of field codes and methods for their preparation, 
printing, distribution, and usage. 

Just as the invention of Morse wire telegraphy had a remarkable effect upon military com- 
munications during the American Civil War, as r^ted in the preceding lecture, so the invention 
of radio also played a very important role in field cocomunications during World War I. 
Now, although it can hardly be said that all commanders from the very earliest days of the 
use of radio in military communications acutely recognized one of the most important dis- 
advantages of radio — ^namely, the fact that radio signals may be more-or-less easily intercepted 
by the enemy — it was not long before the consequences of a complete disregard of this 
obvious fact impressed themselves upon most commanders, with the result that the transmis- 
sion of plain language became the exception rather than the rule. This gave the most momen- 
tous stimulus to the development and increased use of cryptology that this service had ever 
experienced. 

Let us review some of the accomplishments of the Code Compilation Service under the Signal 
Corps, AEF. It was organized in January 1918, and consisted of one captain, three lieutenants 
and one enlisted man. Until this service was organized, that is, from the summer of 1917 
until the end of that year, the AEF had nothing for cryptocommunications except those three 
inadequate means which I’ve mentioned. When it had been determined that field codes were 
needed, little time was lost in getting on with the job that had to be done. Since I had no 
part in this effort, I can say, without danger of being charged with impropriety, that the Code 
Compilation Service executed the most remarkable job in the history of military crypto- 
graphy up to the time of World War II. 

The first work entrusted to it was the compilation of a so-called “Trench Code,” of which 
1000 copies were printed, together with what were then called “distortion tables.” These 
were simple monoalphabets for enciphering the 2-letter groups of the code. 1 will show you a 
picture of a page of this code (Fig. 99) and of one of the “distortion tables” (Fig. 100). The 
danger of capture of these codes was recognized as being such that the books were not issued 
below battalions. Hence, to meet the needs of tiie front line, a much smaller book was prepared 
and printed, called the “Front Line Code.” Distortion tables, 30 of them in all, were issued 
to accompany this code, of which an edition of 3,000 copies was printed. But the code was 
not distributed, because a study of its security showed defects. The truth is that AEF cryptog- 
raphers with personnelin experienced in cryptanalysis were groping in the dark, with little 
or no help from allies. Finally, the light broke through: the Code Compilation Service began 
to see the advantages of that German 3-letter randomized 2-part code I’ve told you about, the 
one called the Satzbiich. Here, then, was the origin of the Trench Codes which were finally 
adopted and used by the AEF, when it was decided that copying and benefiting from the 
experience of German code compilers was no dishonor. But the AEF then went them one bet- 
ter, as you shall now learn. The first code of the new series of the AEF field codes was known 
as the “Potomac Code”; it was the first of the so-called “American River Series,” and it ap- 
peared on 24 Jxme 1918, in an edition of 2,000 copies (Fig. 101). It contained approximately 
1,700 words and phrases and, as the official report so succinctly states, “was made up with a 
coding and decoding section in order to reduce the work of the operators at the front.” The 
designation “two-part,” “randomized,” or, least of all, the British nomenclature, a “hatted” 
code, was stiU unknown — but the principle was there nonetheless. Let us see what the official 
report goes on to say on this point; let us listen to some sound common sense: 
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51 OB.. 


....Advance 


52 OC. .. 


....Advance guard 


S3 OD. 


. .Advancing 


54 OF. 


.Advantage 


55 OG . . 




56 OK . 


...Aeroplane observation 


57 OL. 


. ..Aeroplane wifeless 


58 OM 




59 ON .. 


.... Afternoon 


60 OP. .. 




61 OR .. 


.... Against 


62 OS .. 


....Age 


63 OT ... 




64 OV. . 


.... Air 


65 OW 


...-A1 


66 OZ 


.Alert 


67 UB 


All 


68 UC .. 


.\ll clear 


69 UD 


. ...All conuiiunication has 


70 UF. 




71 UG-. 


. . All of your messages h 






72 UH MI ready 

7S UK. ■■ .^11 returned 

74 UL All right 

75 UM Alone 

76 UN Along 

77 UP Alrendj 

78 UR Also 

7» US Alter 

60 UT Altogether 

81 UV Alwjays 

82 UW. . Am 

88 UZ .^ni having 

84 YB Am 1 

85 YC Am not 

gS YD Ambulance ( 

87 YF. . . .Ambush 



— ed— 1721— HEG 
— ing— 1999— LYW 
— ly— 2083— J«UZ 
— ment — 2121 — NEG 



60 UT Altogether — ly — 2083 — iMU2 

81 UV AlMvays — ment — 2121 — NEG 

82 UW. . Am' ‘ 

88 UZ .^ni having 

84 YB Am 1 

85 YC Am not 

gS YD Ambulance (s) 

87 YF. . . .Ambush 

gg yG Ammunition 

gg yH Ammunition depot (s) 

go YK Ammunition exhausted 

91 yL Ammunition for 75 m.m. Field Gun, reduced 

92 YM Among [charge, explosive projectile 

93 YN Amplifier 

94 YP An 

95 YR -Ance 

96 YS And 

97 YT Angle 

98 YV Annihilate 

99 YW Announce 

09 YZ Annoy 




•C ONFIDENTIAL 



126 





REF ID:A63860 




THIS TABLE MUST NOT FALL INTO THE HANDS OF 

THE ENEMY. 



1. If destroyed to prevent capture, report will be made to 
the office to which its return is ordered. 



2. This table will be used from 3 a. ni. 



to o a. Ill after which it will be re- 



turned ill sealed envelope to 



ENCIPHER 

ABCDEFGHIKLMNOPRSTUVWYZ 
homsvareczknf 1 uwy i tbdp g 



DECIPHER 

abcdefghiklmnoprstuvwyz 

FVIWHNZATLOCMBYGDUPERSK 



Ke\ \%ord 



Ser\ iee niessa|{e 



Private message 



27 





REF ID:A63860 







I) B 


C <> I) I N G 




ABE 


.Falling back 


APE... Relief completed 


m 


ABF. . 


. Heavy 


APF . .Retire 




ABG. . 


.Message received 


APJ. . .Premature 




ABK. . 


.Supply 


APN. . .Impossible 




ABM. . 


.Have you received 


APO. . .Withdraw 




ABO. 


.Bombardment 


API). . .Machine gun animunitlon 




ABP. . 


.Barrage 


APW. . .E 




ABS. . 


.Battalion 


APX. . .Remove 




ABV. 


.Automatic 


APY. . .Moving 




ABW. . 


.Must be 


ASB. . .92 




ABX. 


.Truck 


ASF. . .Shell 




ABY. . 


.Received 


ASG...T 




AFC. . 


. Cannot 


ASK Has not been 




AFD. . 


.One 


ASM. . .Gas IS being blown back 




AFJ. . 


.Turn 


ASO. . .Control 




AFM. . 


.Machine gun emplacement 


ASP. . .Removed 




AFO. . 


. Enemy 


ASV...Keep 




AFR. . 


.7 


ASX. . .Surprise 




AFV. . 


.18 


ASY. . . (Null) 




AFX. . 


. Smoke 


AUB. . .Runner 




AFY. . 


.Stop 


AUF Must have 




AGE. . 


.Diminish 


AUG. . .Condition 




AGF. . 


.-en 


AUK... Safety 




AGH. . 


.Picket 


AUM. . .Minute 




AGK. . 


.Stay 


AUP. . .Rescue 


— 


AGL. . 


.Field buzzer 


AUS. . .Point 




AGN. . 


.In communication with 


AUW. ..V. B. rocket 




AGO. . 


. Question 


AUX. . .On the right 




AGU. . 


.Lieutenant 


AWB. . .Sometime 




-AGY. . 


.Emplacement 


AWC. . .Require 




AUC. . 


.Further 


AWE. . .Barricade 




AMG. . 


. Wounded 


AWG. . .O’clock 




AMK. . 


.We are losing heavily 


AWK. ..Light signal 




AMO. . 


.At close quarters 


AWO. . .Double 




AUP.. 


.Confirm 


AWP. . .Still 




AMS. . 


.Our first line 


AWS . . . Lengthen 




AMV. . 


. -ate 


AWX — Will signal by 




AMX. . 


.Might 


AWY. . .Will not 




AMY. . 


. Evident 


AXB. . .Forcing 




AND. . 


.Battalion 


AXF . .Magazine 




ANF. . 


.During the night 


AXG . . . Trenches 




ANG. . 


.Fifth 


AXM. . .45 




ANK. . 


.All stations 


AXP. . .Send 




ANP. . 


.Observer 


AXS. . .Moment 




ANO. . 


.31 


AXV...Your 




ANS. . 


.Consider 


AXW...Last night 




ANW. . 


.36 


AXY . .Going 




ANX.. 


.Your 


BAD. . .Advance 




ANY.. 


.Within 


BAF . .Afternoon 




APB . 


.Bombproof 


PAG Division hpadqu irtr: f; 





Figure 101. 
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“The main point of difference from other Army codes lay in the principle of reprinting these 
books at frequent intervals and depending largely upon the rapidity of the reissuance for the 
secrecy of the codes. This method did away with the double work at the front of ciphering 
and deciphering, and put the burden of work upon general headquarters, where it properly be- 
longed. Under this system one issue of codes could be distributed down to regiments; another 
issue held at Army Headquarters; and a third issue hdd at General Headquarters. As a matter 
of record this first book, the Potomac, was captured by the enemy on July 20, just one month 
after issuance, but within two days, it had been replaced throughout the entire Army in the field.” 

The replacement code was the Suwanee, the next in the River Series, followed by the Wabash, 
the Allegheny and the Hudson, all for the American First Army. In October 1918 a departure 
in plan was made, and different codes were issued simultaneously to the First and Second 
Armies. This was done in order not to jeopardize unnecessarily the life of the codes by put- 
ting in the field at one time 5,000 or 6,000 copies of any one issue. Thus the Champlain, the 
first of what came to be called the “Lake Series,” for the Second Army, was issued with the 
Colorado of the “River Series” for the First Army; these were followed by the Huron and the 
Osage, the Seneca and the Niagara, in editions of 2,500 each. 

In addition to the foregoing series of codes were certain others that should be mentioned, as 
for example, a short code of 2-letter code groups to be used by firont line troops as an emergency 
code; a short code list for reporting casualties; a telephone code for disguising the names of 
commanding officers and their units, and so on. But there was in addition to aU the fore- 
going, one large code that must be mentioned, a code to meet the requirements for secure 
transmission of messages among the higher commands in the field and between these and GHQ. 
This was a task of considerable magnitude and required several months’ study of messages, 
confidential papers concerning organizations, replacements, operations, and of military docu- 
ments of all sorts. The code was to be known as the AEF Staff Code. In May 1918, the 
manuscript of this code was sent to press, and the printing job was done in one month by the 
printing facilities of the AEF Adjutant General. Considering that the code contained approx- 
imately 30,000 words and phrases, accompanied by code groups consisting of 5-figure groups 
and 4-letter groups, the task completed represents a remarkable achievement by a field printing 
organization, and I believe that this was the largest and most comprehensive codebook ever 
compiled and printed by an army in the field. More than 50,000 telegraphic combinations 
were sent in tests in order to cast out combinations liable to error in transmission. One thou- 
sand copies of this code were printed and boimd. With this code, as a superencipherment 
sjrstem, there were issued from time to time “distortion tables.” There remains only to be 
said that the war was over before this code could be given a good work out, but I have no 
doubt that during the few months it was in effect it served a very useful purpose. Moreover, 
the excellent vocabulary was later used as a skeleton for a new War Department Telegraph 
Code to replace the edition of 1915. 

One more code remains to be mentioned: a “Radio Service Code,” the first of its kind in 
the American Army. This was prepared in October, to be used instead of a French code of 
similar nature. Finally, anticipating the possible requirement for codes for use by the Army 
of Occupation, a series of three small codes, identical in format with the war time trench codes 
of the River and Lake series, was prepared, and printed. They were named simply Field Codes 
No. 1, 2 and 3 but were never issued because there turned out to be no need for them in the 
quietude in Germany after the Army of Occupation marched into former enemy, but now very 
friendly, territory. 

I will bring this lecture to a close now by referring those of you, who might wish to learn 
more about the successes and exploits of the cryptographic organization of the AEF in World 
War I, to my monograph entitled American Army Field Codes in ike American Expeditionary 
Forces during the First World War, Government Printing Office, 1942. Copies are on file in 
the Office of Training Services. In that monograph you will find many details of interest 
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which I have had to omit in this talk, together with many photographs of the codes and ciphers 
produced and used not only by the AEF but also by our allies and enemies during that con- 
flict. 



* * * 

In Lecture IV two USMTC cipher messages were given and I said that their solutions would 
be presented at the conclusion of the next lecture. Here they are, both being &om Major 
General Buell to General-in-Chief HaUeck, relating to the relief and reinstatement of BueU. 

Louisville, Ky., September 29, 1862 

Maj. Gen. HaUeck, General-in-Chief: 

I have received your orders of the 24th inst., requiring me to turn over my command to Maj. 

Gen. G. H. Thomas. I have accordingly turned over the command to him, and in further 
obedience to your instructions, I shaU repair to Indianapolis and await further orders. 

D. C. Budl, 

Major-General 

LouisviUe, Ky., September 30, 1862 

General HaUeck: 

I received last evening your dispatch suspending my removal from command. Out of a sense 
of public duty, I shaU continue to discharge the duties of my command to the best of my abiUty 
until otherwise ordered. 

D. C. BueU, 

Major-General 
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Lecture VI 



This, the sixth and final lecture in this series on the history of cryptology, wiU be devoted 
to a presentation of the events of importance in that history from the end of World War I to 
the end of World War II. It would be entirely too ambitious a project even to attempt to 
compress within a lecture of only fifty minutes all that should or could be told in that segment 
of om- history. Briefly, however, it can be said that the most significant events during that 
quarter of a century were directly concerned firstly, with the advances made in the produc- 
tion of more complex mechanical, electrical, and electronic cryptographic apparatus and, 
secondly, with the concomitant advances in the production of more sophisticated cryptanalytic 
apparatus in order to speed up or to make possible the solution of enemy communications 
produced by these increasingly complex cryptographic machines. These two phases are inter- 
related because, to use a simple analogy, cryptography and cryptanalysis represent the ob- 
verse and reverse faces of a single coin. 

As to advances in the development and use of more effective cryptographic apparatus I 
will only note at this point a comment which General Omar Bradley of World War II fame 
makes in his very interesting book, A Soldier’s Story 

Signal Corps officers like to remind us that “although Congress can make a general, it takes 
communications to make him a commander,” 

It is presumptuous to amend General Bradley’s remark but this is how I wish he had worded 
it: 

Signal Corps officers like to remind us that “although Congress can make a general, it takes 
rapid and secure communications to make him a good commander.” 

This will in fact be the kesmote of this lecture. In other words, communication securify, or 
COMSEC, will be its main theme and the one 1 wish to emphasize. 

But before we take up the cryptographic history of the years between 1918 and 1946, per- 
haps a bit more attention must be devoted to events and developments of cryptanalytic sig- 
nificance or importance during this period. By far the most spectacular and interesting of 
these are the ones which were so fuUy and disastrously disclosed by the various investigations 
conducted by the Army and Navy very secretly while World War II was still in progress, and 
both secretly and openly after the close of hostilities. The investigations were intended to as- 
certain why our Army and Navy forces in Hawaii were caught by surprise by the sneak attack 
on Pearl Harbor by the Japanese on the morning of 7 December 1941. They were also in- 
tended to ascertain and pin the blame on whoever was responsible. I don’t think 1 should 
even attempt to give you my personal opinion on these complex questions, which were studied 
by seven different boards within the Services and finally by the Joint Congressional Committee 
on the Investigation of the Pearl Harbor Attack. I mentioned the latter investigation in my first 
lecture and now will add to what I said then. The committee began its work early in September 
1945 with secret hearings, but on 70 days between 15 November 1945 and 31 May 1946, open 
hearings were conducted, in the course of which some 15,000 pages of testimony were taken and 
a total of 183 exhibits received, incident to an examination of 43 witnesses. In July 1946 the 
committee put out a final report of 580 pages containing its findings, conclusions and recom- 
mendations. The report was accompanied by a set of 39 volumes of testimony and exhibits. 
The report was really not a single report: there was one by the Majority (signed by six Dem- 



^ New York: Henry Holt and Co., 1951, p 474. 
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ocratic and two Republican members), and one by the Minority (signed by two Republican 
members). The Minority Report was not nearly as long as that of the Majority, but it brought 
into focus certain troublesome points which still form the subject of acrimonious discussions 
and writings by those who believe the attack was “engineered” by President Roosevelt and 
that certain authorities in Washington were as culpable as were the principal commanders in 
the Army and in tlie Navy in Hawaii. 

For this lecture, however, it is an interesting fact that both the Majority and Minority Re- 
ports contain glowing tributes to the role played by COMINT before and during our participa- 
tion in World War II. In my first lecture, I presented a brief extract in this regard, taken 
from the Majority Report;® but here is what the Minority Report says on the subject:® 

“Through the Army and Navy intelligence services extensive information was secured respecting 
Japanese war plans and designs, hy intercepted and decoded Japanese secret messages, which 
indicated the growing danger of war and increasingly after November 26 the imminence of a 
Japanese attack. 

With extraordinary skill, zeal, and watchfulne^ the intelligence services of the Army Signal 
Corps and Navy Office of Naval Communications broke Japanese codes and intercepted mes- 
sages between the Japanese Government and its spies and agents and ambassadors in all parts 
of the world and supplied the high authorities in Washington reliable secret information respecting 
Japanese designs, decisions, and operations at home, in the United States, and in other countries. 
Although there were delays in the translations of many intercepts, the intelligence services had 
furnished to those high authorities a large number of Japanese messages which clearly indicated 
the growing resolve of the Japanese Government on war before December 7, 1941.” 

Although references to COMINT abound in the Report of the Majority as weU as in the 
Report of the Minority, there are also many references having to do with COMSEC in both 
Reports, as well as in the 39 accompansdng volumes of testimony and exhibits. Some technical 
misconceptions with regard to those subjects are Hiere, too, and it is quite comprehensible that 
there should be some on the part of laymen, but to encounter a serious one in a book by an 
experienced high-level commander in World War II is a bit disconcerting. Listen to this para- 
graph from a recent book by General Wedemeyer, who was one such commander:* 

“The argument has been made that we could not afford to let the Japanese know we bad broken 
their code. But this argument against a Presidential warning does not hold water. It was not 
a mere matter of having broken a specific code; what we had done was to devise a machine which 
could break any [author’s emphasis] code provided it was fed the right combinations by our 
extremely able and gifted cryptographers. The Japanese kept changing their codes throughout 
the war anyway. And we kept breaking them almost as a matter of routine.” 

I don’t know where General Wedemeyer obtained his information about that wonderful 
machine he mentions. I imagine that there are many other persons who think there is such a 
machine because of all they hear and see about those marvelous “electronic brains” which are 
capable of performing such amazing feats in solving aU kinds of problems. I daresay I won’t 
be wrong in assum ing that many of you do indeed wish there were such a machine as that 
mentioned by General Wedemeyer. Nobody doubts that electronic digital computers can do 
lots of things in cryptologic research, and many persons speculate on the role they may play 
in their possible applications in connection with such research in future wars. 

But let’s leave such speculations, interesting as they may be, and continue with our history 
of past applications. Let’s first dispose of some comments in the COMINT area of that history, 
not only on the events preceding the Pearl Harbor attack, but also on the military, naval and 
air operations which ensued in the Pacific as well as in the European Theatre. 

You will recall that in my first lecture I called to your attention an article which appeared 
in the 17 December 1945 issue of Tims magazine and which weis based upon a letter that the 



^Tbe 79th Congress, 2nd Session, Senate Document No. 244, Washington: The Government Printing 

Office, 1946, p. 232. 

* Ibid, page 514. 

'‘Wedemeyer, General Albert C.; Wedemeyer Reports, Henry Holt and Company, New York: 1958, p. 430. 
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late General Marshall wrote to Governor Dewey, Republican candidate for President in the 
1944 campaign. Here’s how the two principals looked at that time (Fig. 102). In the letter, 
which was written on 27 September 1944 and hand-carried by Colonel Carter W. Clarke, a 
high-level officer in Army G-2, to Governor Dewey, General Marshall begged the Governor to 
say nothing during the campaign about a certain piece of very vital information which had 
become known to the Governor, it having been “leaked” to him by persons unknown and un- 
authorized to disclose it. The information dealt with the fact that U.S. Government author- 
ities had been reading Japanese codes and ciphers before the attack on Pearl Harbor. The 
points which General Marshall wanted to convey were that not only was the “leaked” infor- 
mation true, but much more important were the facts that (1) the war was still in progress; 
(2) the Japanese were still using certain of the pre-Pearl Harbor cryptosystems; and (3) the U.S. 
Government was still reading highly secret Japanese messages in those systems, as well as 
highly secret messages of other enemy governments. Therefore, it was absolutely vital that 
Governor Dewey not use the top secret information as political ammimition in his campaign. 




Figure 102. 

After merely glancing over the first two paragraphs of the letter. Governor Dewey handed 
it back to Colonel Clarke with the comment that he did not wish to read any further, where- 
upon there was nothing for Colonel Clarke to do but return immediately to Washington. 
General Marshall then made certain changes in the opening paragraphs of the letter and again 
Colonel Clarke hand-carried it to the Governor, who then read the whole of it. In my first 
lecture I said that I might later give further tracts from Time's account of this episode, but 
there isn’t time. Instead, however, I’ve put the whole account in Appendix I to the present 
lecture. The Marshall-Dewey correspondence is so importsint in cryptologic history that I 
have deemed it useful to put the whole of it in Appendix II. ’ 

The information disclosed during the various official investigations of the attack on Pearl 
Harbor, so far as concerns the important COMINT achievements of the Army and the Navy 
before and after that attack, was classified information of the very highest security level, and 
the disclosures were therefore highly detrimental to our national security. Much has been 
written about them since the end of hostilities and although all of that formerly top secret 



* See p. 118. 
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information is now in the public domain, fortunately very few details of technical significance 
or value can be found therein. Hints and even blunt statements about the great role played 
by COMINT in U.S. military, naval and air operations are found in books and articles pub- 
lished by U.S. Government officials and American officers, as well as by officers of the beaten 
Japanese, German, and Italian armed forces. In the interests of brevity, I will cite only a 
few examples.^ 

As regards disclosiires by U.S. Government officials and officers, I can begin with those of 
the late Mr. Cordell HuU, who was Secretary of State at the time of the Pearl Harbor attack. 
In his memoirs are many references (over a dozen) to the contents of intercepted and solved 
Japanese Foreign Office messages.’' The late Mr. Henry L. Stimson, Secretary of War at that 
time, makes clear references in his autobiography to COMINT successes and our failure to use 
them prior to the attack.^ Dr. Herbert Feis, who was Mr. Hull’s adviser on international 
economic affairs from 1937 to 1943, and from 1944 to 1946 was Mr. Stimson’s Special Con- 
sultant, has a good deal to say about the role played by “Magic” in a book written as a member 
of the Institute for Advanced Study, at Princeton.* Admiral Kimmel, one of the two com- 
manders in Hawaii at the time of the attack, in defending himself in his book, cites many 
“Magic” messages.^ And Major General Sherman Miles, head of G-2 at the time of the 
attack, has much to say about “Magic” in an article published in 1948.^‘ As regards dis- 
closures by former enemy officers, the following are of particular interest because they concern 
the Battle of Midway, which is considered the one that turned the tide of war in the Pacific 
from a possible Japanese victory to one of ignominious defeat; 

“If Admiral Yamamoto and hia staff were vaguely disturbed by the persistent bad weather and 
by lack of information concerning the doings of the enemy, they would have been truly dismayed 
had they known the actual enemy situation. Post-war American accounts make it clear that 
the United States Pacific Fleet knew of the Japanese plan to invade Midway even before our 
forces had sortied from home waters. As a result of some amazing achievements by American 
intelligence, the enemy had succeeded in breaking the principal code then in use by the Japanese 
Navy. In this way the enemy was able to learn of our intentions almost as quickly as we had 
determined them oursdves.’’ 



“The distinguished American Naval historian. Professor Samuel E. Morison, characterized the 
victory of United States forces at Midway as “a victory of intelligence.” In this judgment the 
author fully concurs, for it is beyond the slightest possibility of doubt that the advance discov- 
ery of the Japanese plan to attack was the foremost single and immediate cause of Japan’s de- 
feat. Viewed from the Japanese side, this success of the enemy’s intelligence translates itself 
into a failure on our part — a failure to take adequate precautions for guarding the secrecy of 
our plans. Had the secret of our intent to invade Midway been concealed with the same thor- 
ouglmess as the plan to attack Pearl Harbor, the outcome of this battle might well have been 
different. But it was a victory of American intelligence in a much broader sense than just this. 
Equally as important as the positive achievements of the enemy’s intelligence on this occasion 
was the negatively bad and ineffective functioning of Japanese intelligence.” 



* A good bibliographical survey of items concerning the attack up to the year 1955 will be found in the follow- 
ing: Morton, Louis. “Pearl Harbor in Perspective,” U.S. Naval Institute Proceedings, Vol. 81, No. 4, Whole 
No. 626, April 1955, pp. 461-8. 

’’ The Memoirs of Cordell Hull, New York: The MacMillan Co., 1948, Vol. II, pp. 998, 1013, 1035, 1055, 
1056-7, 1060, 1063, 1068, 1074, 1077, 1087, 1092, 1095, 1096, 1099-1100. 

8 Stimson, Henry L., and McGeorge Bundy, On Active Service in Peace and War, Harper & Brothers, 
New York 1947, pp. 391-4, 454-5. 

" Feis, Herbert, The Road to Pearl Harbor, Princeton: The Princeton University Press, 1950, p. vii, and 

pp. 219-340, Passim. (See index under “Magic” on p. 350). 

10 Kimmel, Husband E., Admiral KimmeVs Story, Henry Regnery Co., Chicago: 1954. 

11 Miles, Sherman, “Pearl Harbor in Retrospect,” The Atlantic Monthly, Vol. 182, No. 1, July 1948, pp. 65- 
72. 

1* Midway, The Battle that Doomed Japan: The Japanese Navy’s Story, by Matsuo Fuchida and Matasake 
Okumiya, U.S. Naval Institute Publication, Aimapolis, 1955, pp. 131, and 232. Admiral Morison actually 
wrote: “Midway was a victory of intdligence bravely and wisely applied.” See Vol. IV of his History of 
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It is the second extract above which is of special interest to us at the moment, and, in par- 
ticular, the portion which refers to “the negatively bad and ineffective functioning of Japanese 
inteUigence.” The author is, I think, a bit too severe on the Japanese intelligence organiza- 
tion. 1 say this because their cryptanalysts were up against much more sophisticated crypto- 
systems than they dreamt of, or were qualified to solve. In fact, even if they had been ex- 
tremely adept in cryptanalysis it would have been of no avail — U.S. high-level communica- 
tions were protected by cryptosystems of very great security. 

This brings us to a phase of cryptology which is of highest importance — the phase whidi 
deals with communications security, or COMSEC, and I shall confine myself largely to its 
development and historical background in om Armed Forces. The background is a very 
broad one because it should include the background of the developments of each of the three 
components of COMSEC, viz, (1) cryptosecurity, (2) transmission security, and (3) physical 
security of cryptomaterials. But since time is limited and because 1 think you would be more 
interested in the phases pertaining to cryptosecurity, I will omit further references to the other 
two components or to the history of their development. And even in limiting the data to 
cryptosecurity, 1 will have opportimity only to give some of the highlights of the development 
of the items that comprise ovu present cryptomaterials, omitting comments on the history of 
the development and improvement of our techniques, procedures and practices, all of which 
are extremely important. 

I shall begin the story with a definition which you will find in any good English dictionary, 
a definition of the word “accident.” You wiU get the point of what may seem to you right 
now to be merely another of my frequent digressions from the main theme, but if it be a digres- 
sion I think you will nevertheless find it of interest. The word “accident” in Webster’s Un- 
abridged Dictionary is defined as follows: 

1. Literally, a befalling; 

a. An event that takes place without one's foresight or expectation; an undesigned, sudden, 
and unexpected event. 

b. Hence, often, an undesigned and unforeseen occurence of an afflictive or unfortunate char- 
acter; a mishap resulting in injury to a person or damage to a thing; a casualty; as, to 
die by an accident. 

There are further definitions of the word but what I’ve given is sufficient for our purposes. 
But why define the word? What has it to do with COMSEC? 

During our participation in World War II, the President of the United States, accompanied 
by many of his highest-level military, naval and civilian assistants, journeyed several times 
half-way around the world. He and they journeyed in safety — neither he nor they met with an 
“accident.” Here’s a picture taken at the Casablanca Conference in January 1943 (Fig. 103). 
Imagine the disaster it would have been if the plane carrying this distinguished group had been 
shot down and lost in the Atlantic or the Mediterranean. On the other hand, in April 1943, 
Admiral Isoroku Yamamoto, Commander-in-Chief of the Combined Fleet of the Japanese 
Imperial Navy started out on what was to be just an ordinary inspection trip but turned out 
to be a one-way trip for him. Here’s a good picture of the Admiral (Fig. 104), who was the 
architect of the attack on Pearl Harbor. His death was announced in an official Japanese 
Navy communique stating that the Admiral “had met a glorious end while directing operations 
in a naval engagement against superior enemy forces.” But we know that this was simply 
not true; Admiral Yamamoto “met with an accident.” Some bright person — I think it was 



U.S. Navy Operations in the Pacific; _“Co^ Sea, Midway and Submarine Actions, May-August 1942.” Little, 
Brown, New York: 1944, page 185. It is interesting to note that Adm. Morison, in an article entitled 

“Lessons of Pearl Harbor” published in the Saturday Evening Post, Oct. 28, 1961, concludes, “It was the 
setup at Washington and at Pearl, not individual stupidity, which confused what was going on. No one 
person knew the intelligence picture; no one person was responsible for the defense of Pearl Harbor; too many 
people assumed that others were taking precautions that they failed to take.” 
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the late Jimmy Walker, when Mayor of New York City — has said that “accidents don’t just 
happen — they are brought about.” Jimmy Walker’s comment was true in this case at least: 
Admiral Yamamoto did not die by accident; he died because our Navy knew the schedule of 
his trip down to the very last detail so that it was possible to set up an ambush with high 
degree of success. Here is the story as told in an interesting manner by Fleet Admiral Wil- 
liam F. Hedsey, U.S.N., in his book entitled Admiral Halseys Story. 

“I returned to Noumea in time to sit in on an operation that was smaller but extremely grati- 
fying. The Navy’s code experts had hit a jackpot; they bad discovered that Admiral Isoroku 
Yamamoto, the Commander-in-Chief of the Imperial Japanese Navy, was about to visit the Sol- 
omons. In fact, he was due to arrive at BaUale Island, just south of Bougainville, precisely at 
0945 on April 18. Yamamoto, who had conceived and proposed the Pearl Harbor attack, had 
also been widely quoted as saying that he was “looking forward to dictating peace in the White 
House at Washington.’’ I believe that this statement was subsequently proved a canard, but 
we accepted its authenticity then, and it was an additional reason for bis being No. 3 on my 
private list of public enemies, closely tra iling Hirohito and Tojo. 

Eighteen F-38’s of the Army’s 339th Fighter Squadron, based at Henderson Field, were as- 
signed to make the interception over Buin, 35 miles short of BaUale. Yamamoto’s plane, a 
Betty, accompanied by another Betty and covered by six Zekes, hove in sight exactly on sched- 
ule, and Lt. Col. Thomas G. Lamphier, Jr., dove on it and shot it down in flames. The other 
Betty was also shot down for good measiire, plus one of the Zekes . . We bottled up the story, 
of course. One obvious reason was that we didn’t want the Japs to know that we had broken 
their code . . . Unfortunately, somebody took the story to Australia, whence it leaked into the 
papers, and no doubt eventually into Japan . . . But the Japs evidently did not realize the im- 
plication any more than did the tattletale; we continued to break their codes.’’ 

But lest you get the impression that enemy intelligence agencies had no success at all with 
secret communications of U.S. Armed Forces, let me tell you that they did have some suc- 
cess and in certain instances, very significant success. There is not time to go into this some- 
what disillusioning statement, but 1 can say that as a general rule the successes were attri- 
butable not to technical weakness in U.S. cryptosystems but to their improper use in the case 
of certain low-level ones, by unskilled, and improperly or insufficiently trained cryptographic 
clerks. I may as well tell you right now that this weakness in cryptocommunications has 
been true for a great many years, for centuries as a matter of fact, because as long ago as the 
year 1605 Francis Bacon, who wrote the first treatise in English on the subject of cryptology, 
made the following comment:'^ 

“This Arte of Cypheringe, hath for Relative, an Art of Discypheringe; by supposition unprof- 
itable; but, as things, are of great use. For suppose that Cyphars were well managed, there bee 
Multitudes of them which exclude the Discypherer. But in regarde of the rawnesse and un- 
skfllfulness of the handes, through which they passe, the greatest Matters, are many times carry- 
ed in the weakest Cyphars,” 

When electrical, particularly radio, transmission entered into the pictine, additional hazards 
to communication security had to be taken into account, but many commanders failed to 
realize how much valuable intelligence can be obtained merely from a study of the procedures 
used in the transmission of messages as well as from a study of the direction and flow of radio 
traffic, the call signs of the transmitting and receiving stations, etc., all without solving the 
communications even if they were in cryptic form. Following are two paragraphs extracted 
from a document entitled German Operational Intelligence, published in April 1946 by the 
German Military Document Section, a Combined British, Canadian, and U.S. Staff: 

“Signal intelligence (i.e., communication intriligence or COMINT) was a chief source of in- 
formation in the German Army. In the eastern theater, where there was offensive warfare 



Admiral Halseys Story. McGraw-Hill, New York, 1947, pp. 155-157. 
u j'Ae Two Bookes of the profidence and advancement of Learning, London, 1605, p. 61. This book is com- 
monly known as The Advancement of Learning. Some 18 years later Bacon saw no reason to change his com- 
ment in his De Augmentis Scientiarum, London 1623. In fact, he strengthened it by making it read: “ . . . but 
the rawnesse and unskillfulnesse of Secretaries, and Clarks, in the Comts of Princes, is such that many times 
the greatest matters are committed to futile and weake Cyphers.’’ (Gilbert Wats’ translation, 1640, p. 270.) 
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primarily, the signal intelligence service was well-organized with well-defined purposes, efilcient 
personnri, and adequate equipment. In the course of the campaign, it was reorganized to ex- 
ploit to the fullest the success already experienced, and, by 1943, there existed a complete and 
smoothly fimctioning machine sufficient to meet all demands.” (p. 8) 



“Most of their signal intercept success came from low-echelon traffic. Armored and artillery 
radio nets passing operational traffic were followed closely and were one of the chief sources of 
signal intelligence. Artillery radio nets were given first coverage priority. Apart from mes- 
sages intercepted in code or in clear, signal procedure, peculiarities of transmitting, and charac- 
teristics of Allied radio operators provided enormous assistance in helping to evaluate signal in- 
formation. The Germans noticed that call signs were often the same for a unit over long peri- 
ods and that even frequencies remained unchanged for weeks at a time.” (p. 8) 

A great many examples of intercepted messages of tactical content are cited in the afore- 
mentioned document, which is replete with information of deep interest, although the docu- 
ment was originally issued with the lowest security classification then in use (U.S. “Restricted”; 
British-Canadian “FOR OFFICIAL USE ONLY”). I wish there were time to quote at 
greater length from this useful brochure. 

Coming directly now to the history of the development of our cryptomaterials themselves, 
I hardly need reiterate what was pointed out in previous lectures as to the profound effect of 
the advances in the science and art of electrical communications in the 20th Century. Those 
advances had a direct effect upon military communications and an indirect effect upon military 
cryptology. Hand-operated ciphers and, of course, codebooks became almost obsolete because 
the need for greater and greater speed of cryptographic operations became obvious in order to 
match as much as possible the very great increase in the speed of co mm u ni cations brought 
about by inventions and improvements in electric wire and radiotelegraphy. The need for 
cryptographic apparatus and machines thus very soon became quite obvious, but it took quite 
some time to satisfy that need in a manner that could be considered to give adequate security 
for military communications. 

The history of the invention and development of cryptographic devices, machines and 
associated apparatus and material is long and interesting. Let us begin with a r4sum4 of the 
earliest items of importance in that history. 

Until the advent of electronic cipher machines most cryptographic apparatus and devices 
were built upon or around concentric circular rotating members such as cipher wheels, cipher 
disks, etc. A very early, perhaps the earliest picture of such a device appears in a treatise by 
an Italian cryptologist named Alberti, whose Trattati in Cifra was written in Rome about 
1470. It is ^e oldest tract on cryptography the world now possesses. Here’s a photo of 
Alberti’s di^ (Fig. 105), but I won’t take the time to explain it except to say that the digits 
1, 2, 3, 4 were used to encipher code groups and to call your attention to the fact that the 
letters of the cipher or revolving alphabet were in mixed order. In Porta’s book, first published 
in 1563 in Naples, there appear several cfipher disks; in the copy which was given me as a gift 
by Colonel Fabyan, they are still in working condition. Here is a picture of one of them 
(Fig. 106). In this version the device uses symbols as cipher characters. And apparently 
nobody thought up anything much better for a long, long time. It seems, in fact, that not 
only did no one think up ansrthing new or even some improvements on the original Alberti or 
Porta disks but those who did any thinking at aU on the subject; merely “invented” or “re- 
invented” the same thing again, and that happened repeatedly in successive generations. 
For instance, in Lecture No. IV of this series you were shown a picture of the cipher disk “in- 
vented” by Major Albert Myer, the first Chief Signal Ofiicer of the U.S. Army, who obtained 
a patent on his invention in 1865. Here’s a picture of the patented disk (Fig. 107) and the 
explanation of the invention (Fig. 108). You may also remember that signalmen of the Con- 
federate Signal Corps mechanized the old Vigendre Square and put it out in the form of a cyl- 
inder (see Figs. 65 and 66 of Lecture No. IV). The cipher disk used by the Signal Corps of 
the U.S. Army during the decade 1910 to 1920, that is, during the period intruding our par- 
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Figure 105. 



Figure 106. 



ticipation as a belligerent in World War I, was nothing but a white celluloid variation of the 
original Alberti parchment disk of the vintage of 1470 (except that it was even simpler than 
its progenitor, because in the latter the cipher alphabets produced were mixed alphabets where- 
as, in the Signal Corps disk, the cipher alphabets are simple reversed standard sequences (Fig. 

109) . We aU know that it generally takes a pretty long time to get a patent through the 
U.S. Patent Office, but the ancient device was patented in 1924 by S. H. Huntington (Fig. 

110) : here you can see a great improvement over the Signal Corps version — a blank is ad- 
ded to both sequences so that the space between words could be enciphered. Indication of 
word space, as you have learned, is a fatal weakness if seen in the cipher text; in the Huntington 
device the spaces between words would be enciphered but the cipher text would have space 
signs, although they would not correspond to the actual spaces between words in the plain 
text. In the Huntington device, the space signs in the cipher text would be a bit misleading 
but not to an experienced cryptanalyst, who would soon realize that they do not actually rep- 
resent “word space” in the plain text. 

It is interesting to note that in 1936, during the days when the German National Socialists 
were banned as an organization in Austria, the Nazis used this variation of the old disk — it had 
10 digits on both the outer and the inner sequences for enciphering digits (Fig. 111). 

The first significant improvement on the old cipher disk was that made by Sir Charles Wheat- 
stone, in 1867, when he invented a cipher device which he called The Cryptograph. He de- 
scribed it in a volume entitled The Scientific Papers of Sir Charles Wheatstone, published in 
1879 by the Physical Society of London. Here is a picture of the Wheatstone device in my 
private collection (Fig. 112). What Sir Charles did was to make the outer circle of letters 
(for the plain text) comprise the 26 letters of the alphabet, plus oxie additional character to 
represent “space.” The inner circle, for cipher equivalents, contains only the 26 letters of the 
alphabet, and these can be disarranged in a mixed sequence. Two hands, like the hour and 
minute hands of a clock, were provided and they are under control of a differential gear mech- 
anism, so that when the long or “minute hand” is advanced to make a complete circuit of the 
letters on the outer circle the short or “hour hand” advances one space or segment on the 
inner circle. In Fig. 112, for example, the plaintext letter G is represented by the cipher letter 
A, that is, Gp = Ae. If the long hand is now advanced in a clockwise direction for one re- 
volution, Gp win be represented no longer by A» but by G„ the letter immediately to the right 
of Ae on the inner circle. In encipherment the long hand is always moved in the same direc- 
tion (clockwise, for example), and its aperture is placed successively over the letters on the 



139 



t i ONFIDENTIAL 



REF ID:A63860 







jyUpAS. 




% 





Figure 107. 



t ?ONFIDENTIAL 



140 





REF ID:A63860 



OONITDjEJrj r i ' ^LL 



United States Patent Office. 

ALBERT J, MYEE, OP WASHDTGTON, OISTBIOT OF COLUMBIA. 

IMPROVEMENT IN SIGNALS. 



Specification forming part of Lettera Patent Ko. S0<M6, dated NoTomber M, 1865. 



To all ichom it may coneerm 

Be it known that I, Albert J. Myeb, of 
Washington city. District of Colninhia, have 
inrcntctl a new Mode of Commnnicating by 
Signals; and I do hereby declare that the fol- 
lowing is a fall, clear, and exact description 
thereof, reference being had to the accompany- 
ing drawings, making a part of tills specifica- 
tion, in which — 

Figure 1 is a front view of tno disks having 
certain characters- upon them to be nsed in 
communicating by signals. Fig. 3 is a diamet- 
rical section through the di.sks, shoniiig the 
manner of attaching them together. 

Tlieobject of this in\ ention is to atturd means 
whereby persons within signal distanceof each 
other can commniiicate intelligibly by certain 
movemeiiks of flags or other objects, anil a sys- 
tematic arrangement ot letters and numerals 
or other char<iutera upon movable and station- 
ary disks, without the possibility of having 
their messages deteeted by others. 

To enable others skilled in the art to under- 
Ktand my invention 1 will deseiibe my improved 
method of signaling. 

Ill the ai compaiiying diaw nigs, A lepreseiits 
a disk haling jirinted or engraved upon it in 
any sequence certain figures or characters, 
which indicate signals to be made or characters 
or words to be written. B is a smaller disk 
having upon it the letters of an alphabet in 
any desired sequence, which it may be desired 
to refer to in signaling. These two disks are 
pivoted togcthercentralh by means of aclamp- 
sciew, on loosouiiigwhieh tliesinallerdisk may 
bo turned in either direction, so ns to bring 
difierent letters opjiosite to the numerals, after 
which, by tightening ihe screw o, the disks 
will be rigidly counected together. 

Each person giving and receiving signals 
should be provided with one of these devices, 
and there should bo a preconcerted niider- 
standiiig between such persons for moving the 
disk B and causing different signal combina- 
tions to stand at different times tor dittbreut 
letters or messages, for the purpose of conceal- 
ing the moaning of the signals. 

The mode of signaling is as follows: Sup- 
pose two persons within signal distance of 
each other should desire to commnnicate the 
word “are,” and by preconcerted signals have 
both adjusted their disks so that the letter A 
shall be opposite to the number 11. Eow, to 
spell the word “are” the signalsdesignatedby 
the combination “11” for “A”are made, and this 



will indicate to the observer the letter “A.” 
Then there should be made the signal indicated 
by the figures “8111” or“B,”and this wouldin- 
dicate to the observer this letter. The signal 
or signals indicating the letter “E,” which are 
“1181” on the disk, conclndo the word are. 

It may be desirable for purposes of conceal- 
ment that the word “are,” though often ocenr- 
ling, should notitgain be indicated in the same 
communication by the same signals. In this 
case let it lie nnderstood by jireconcert that 
upon any given signal, such as the dropping 
of a flag or some peculiar wave of a flag, the 
smaller disk, or that which has upon it the 
letters of the alplmbet, is to be moved upon 
the largest disk, or that which has upon it the 
numerals, turning to the right hand, saj, the 
distance of fonr spaces, marked upon the disk. 
Now, without cessation of signaling, both per- 
sons, the transmitter and the receiver, would 
ui>on this signal each so change the position 
of the disks that in again signuliug the woid 
“ are” “A” would stand opposite to and be des- 
ignated by the combination “188,” “B” would 
be desiguatml by the combinaiioii “ 1188,” and 
« E” by “1881.” Tlie letters “A K E” or the 
word “are” thus signaled would in no waj re- 
semble the same word before sent. In this 
way it cun he so arranged by precoiiceriiug 
that no word shall appear twice in the same 
manner in the same message. 

There may be seieral disks joined together, 
having vanons figures and charactei's upon 
them, and by preconcert it may be nnderstood 
that ill certain messages sonic of them are to 
be used and not othois, or there may be moie 
than one row of figures or characters on any 
ot the disks and the preconcerted arrangement 
for using may bo changed infinitely, so that 
the uiiinstriicted cannot discover in what man- 
ner the disks are to bo moved or naod. 

Having thus described my invention, what 
I claim as new, and desire to secure by letters 
Patent, is — 

The within -described system of signaling, 
which is controlled by means ot letters, iin- 
merals, or other characters upon disks that are 
pat together in such manner that the relative 
positions of such characters can be changed at 
pleasure, substantially as set forth. 

ALBERT J. MYEB. 

Witnesses : 

B. T. Campbell, 

E. SOSAPSB, 



Figure 108. 
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outer circle according to the successive letters of the plaintext message, the cipher equivalents 
being recorded by hand to correspond with the letters to which the short hand points on each 
encipherment. In this way, identical letters of the plain text will be represented by different 
and varying letters in the cipher text, depending upon how many revolutions of the long hand 
intervene between the first and subsequent appearances of the same plaintext letter. Thus, 
wiUi the alphabets shown in Fig. 112, and with the initial setting Gp = A„ the word “refer- 



ence” would be represented in cipher as follows: 



REFERENCE 

XZZZB6QAM’ 



in which it will be seen that 



repeated letters in the plain text are represented by different letters in the cipher text. Cor- 
respondents must naturally agree upon the mixed alphabet used in the inner circle and the 
initial positions of the two hands at the beginning of the encipherment of a message. In de- 
cipherment, the operator moves the long hand again clockwise, until the hour hand points to 
the cipher letter in the plaintext letter which is seen through the aperture at the end of the long 
hand on the outer circle. Thus, in the case of the example given above the cipher letters 
XZAABGQAM will be found to represent the word REFERENCE. 

During World War I, some time in 1917, the British Army resuscitated Wheatstone’s crypto- 
graph and improved it both mechanically and cryptographically. Here’s a picture of the 
device (Fig. 113), in which it wiU be seen that there are now no longer the “minute” and “hour” 
hands but a single hand with an opening or window that simultaneously discloses both the 
plain and the cipher letters. When the single hand is turned, the inner circle of segments, 
which are made of a substance upon which letters may be written in pencil or in ink is ad- 
vanced eccentrically and against a similarly-made outer circle of segments. In this improve- 
ment on the original Wheatstone device both sequences of letters are now mixed sequences. 
Making the outer circle also a mixed sequence added a considerable degree of security to the 
cipher. When it was proposed that all the Allied armies use this device for field cryptocom- 
munications and its security had been approved by British, French, and American cryptol- 
ogists (both at GHQ-AEF and at Washington), an opportunity to agree or disagree with the 
assessment of these cryptologists was given me while still at Riverbank. I was able to show 
that the modified Wheatstone cryptograph was still insufi^ciently secure for military purposes. 




Figure 113. Figure 114. 
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and the devices, thousands of which had been manufactured and issued, were withdrawn. If 
you are interested in the method of solution, I used you will find it in Riverbank Publication 
No. 20, entitled Several Madiine Ciphers and Methods for their Solution (1918). A better 
method of solution was devised by me about 1923. 

Some years later, and almost by sheer good fortune, I learned that a cipher machine was in 
the musemn of a small town in Connecticut named Hamden. I was interested and wrote to 
the curator of the museum, requesting that he lend the device for a short period to me as prin- 
cipal cr 3 q)tanalyst of the War Department. Imagine my astonishment and pleasure when I 
unpacked the box upon its receipt and found a device, beautifully made and encased in a fine 
mahogany case, with its inventor’s name, Decius Wadsworth, and the date, 1817, engraved on 
the face of the machine, which was nothing but another version of the Wheatstone Cr 3 rpto- 
graph. Here’s a picture of it (Fig. 114). There are good reasons to believe that the model 
was made by Eli Whitney. Mechanically it was similar to the British modification, except 
that the outer sequence had 33 characters, the inner 26, so that the differential gear instead 
of operating on the ratio of 27 to 26 was now on the ratio 33 to 26. Thus, Colonel Decius 
Wadsworth, who was then the first Chief of Ordnance of the U.S. Army, had anticipated 
Wheatstone by over 60 years in this invention. He also anticipated the British Army crypto- 
logists of World War I by a whole century in their modification of Wheatstone’s original, be- 
cause in the Wadsworth device, too, there was only one hand and both alphabets could be 
made mixed sequences. This is very clearly shown in Fig. 115 as regards the outer sequence, 
and I believe the inner one could also be disarranged, but the picture does not clearly show 
this to be the case, so that I am not sure as to this point. I returned the device a good many 
years ago, and it is now on display in the Eli Whitney Room of the New Haven Historical 
Society’s Musemn. 

The next device I bring to your attention is shown in Fig. 116, a device invented by a French 
Army reservist. Commandant Bazeries, who for some 10 years valiantly but unsuccessfully 
tried to get the French Army to adopt it. He included a description of his device, which he 
called his “Cryptographe Cylindrique” or “cylindrical cryptograph,” in a book published in 





F^ure 115. 
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1901 in Paris. “ He had, however, previously described his device in an article entitled “Cryp- 
tographe ^ 20 rondelles — alphabets (25 lettres par alphabet),” published in 1891.^° In this 
device there is a central shaft on which can be mounted 20 numbered disks on the peripheries 
of which are differently mixed alphabets of 25 letters each. The disks can be assembled in 
some prearranged or key sequence on the shaft, from left to right, but they can be revolved 
thereon and then locked into position on the shaft by pushing in the locking disk at the ex- 
treme left. The first 20 letters of the plain text of a message are first aligned, as seen in Fig. 
116 (JE SUIS IND^CHIFFRABLE = “I am indecipherable”); the disks are then locked into 
position so that the whole assemby can be turned; and as cipher text one may select any one 
of the other 24 rows of letters, which are recorded then by hand on paper. Then the next 20 
plaintext letters are aligned, one of the oth«: 24 rows of letters selected and recorded, etc. To 
decipher a message, the disks having been assembled on the shaft in accordance witii the pre- 
arranged or key sequence, one takes the fiist 20 cipher letters, aligns and then locks them into 
position, and then turns the whole cylinder, searching for a row of letters which form intelli- 
gible text. There will be one and only one such row, and the plaintext letters are recorded. 
Then the next 20 letters of cipher are aligned, etc. 

Another French cryptologist, the Marquis de Viaris, soon showed how messages prepared 
by means of the Bazeries cylindrical cipher could be solved. Maybe that is why Bazeries 
wasn’t too successful in his attempt to get the French Army to adopt his device. But in the 
U.S. there were apparently none who encoimtered either what Bazeries or de Viaris wrote on 
the subject. Capt. Parker Hitt, U.S. Army, whom I have mentioned in a previous lecture, in 
1915 invented a device based upon the Bazeries prindple but not in the form of disks mounted 
upon a central shaft. Instead of disks, Hitt’s device used sliding strips and here is a picture 
of his very first model (Fig. 117), which he presented to me some time in 1923 or 1924. But 
I first learned about his device some time in 1917 while still at Riverbank and solved one 
challenge message put up by Mrs. Hitt, a Riverbank guest for a day. In meeting the chal- 
lenge successfully (which brought a box of chocolates for Mrs. Friedman from Mrs. Hitt) 1 
didn’t use anything like what I could or might have learned from de Viaris, because at that 
time I hadn’t yet come across the de Viaris book. I solved the message by guessing the key 
Mrs. Hitt employed to arrange her strip alphabets. She wasn’t wise to the quirks of inexpe- 
rienced cryptographic clerks; she used RIVERBANK LABORATORIES as the key, just as I 
suspected she would. The device she brought with her was an improved model: the alpha- 
bets were on paper strips and the latter were glued to strips of wood, as seen in Fig. 118. 

Capt. Hitt brought his device to the attention of the then Major Mauborgne, whom 1 have 
also mentioned in a previous lecture and who was then on duty in the Ofi5ce of the Chief Signal 
OfiBicer in Washington. There is some question as to whether it was Hitt who first brought 
his device to Mauborgne’s attention; Mauborgne later told me that he had independently 
conceived the invention and, moreover, had made a model using disks instead of strips. I 
have that model, a present from General Mauborgne many years later. It is made of very 
heavy brass disks on the peripheries of which he had engraved the letters of his own specially- 
devised alphabets. In 1919, after my return to Riverbank from my service in the AEF, 
Mauborgne sent Riverbank the beginnings (the first 25 letters) of a set of 25 messages en- 
ciphered by his device and alphabets. He also sent the same data to Major Yardley, in G— 2. 
Nobody ever solved the messages, even after a good deal of work and even after Mauborgne 
told us that two consecutive words in one of the challenge messages were the words “are you.” 
Many years later I found the reason for our complete lack of success, when I came across the 
plain texts of those messages in a dusty old file in one of the rooms occupied in the old Muni- 
tions Building by the Office of Chief Signal Officer. Here is a picture of the be ginning s of the 
first six messages (Fig. 119). Mauborgne, when 1 chided him in the unfairness of his challenge 
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messages, told me that he had not prepared them himself — ^he had an underling (Major Fowler 
was his name, I still remember it!) prepare them. In our struggles to solve the challenge mes- 
sages we had assumed that they would contain the usual sorts of words found as initial words 
of military messages. It was the complete failure by Riverbank and G-2 to solve the chal- 
lenge messages that induced Mauborgne to go ahead with the development of his device. It 
culminated in what became known as Cipher Device, Type M-94. Here is a picture of it 
(Fig. 120). That device was standardized and used for at least 10 years in the U.S. by the 
Army, the Navy, the Marine Corps, the Coast Guard, the Intelligence Agencies of the Treasury 
Department, and perhaps by other agencies. 

In 1922, a wartime colleague, the late Capt. John M. Manly (Professor and Head of the De- 
partment of English at the University of Chicago) brought to my attention a photostat of 
two pages of a holographic manuscript in the large collection of Jefferson Papers in the Library 
of Congress. It described his invention entitled “The Wheel Cypher,” and here is a picture 
of the second page (Fig. 121) showing Jefferson’s basis for calculating the number of permuta- 




Figure 118. 
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tions afforded by the set of 36 wheels of his device. He didn’t attempt to make the multi- 
plication; he didn’t have an electronic digital computer — for the total number is astronomical 
in size. Jefferson anticipated Bazeries by over a century, and the Hitt-Mauborgne combina- 
tion by almost a century and a half. 




Figure 120. 

It soon became apparent to both Army and Navy cryptologists that a great increase in 
cryptosecurity would be obtained if the alphabets of the M-94 device could be made variant 
instead of invariant. There began efforts in both services to develop a practical instrument 
based upon this principle. I won’t take time to show all these developments but only the 
final form of the one adopted by the Army, Strip Cipher Device Type, M-138-A (Fig. 122). 
This form used an aluminum base into which channels with overhanging edges were cut to 
hold cardboard strips of alphabets which could be slid easily within the channels. It may be 
of interest to you to learn that after I had given up in my attempts to find a firm which would 
or could make such aluminum grooved devices in quantity, Mrs. Friedman, by womanly wiles 
and cajolery on behalf of her own group in the U.S. Coast Guard, succeeded in inducing or 
enticing one firm to make them for her. And that’s how the first models of strip cipher devices 
made of aluminum by the extrusion process came about, and how the U.S. Army, by adminis- 
trative cooperation on an inter-Service level and technical cooperation on a marital level, 
found it practical to develop and produce in quantity its Strip Cipher Device, Type M-138-A. 
This was used from 1935 to 1941 or 1942 by the Army, the Navy, the Marine Corps, the Coast 
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Guard, et al, including the Treasury and State Departments. It was used as a back-up S 3 rstem 
even after the Armed Services as well as the Department of State began emplosdng much 
better and more sophisticated cipher machines of high speed and security. 
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Figure 121. 



Thus far we have been dealing with cipher devices of the so-called “hand-operated” t}^. 
None of them can readily be considered as being “machines,” that is, apparatus employing 
mechanically driven members upon which alphabetic sequences can be mounted so that con- 
stantly changing sequences of cipher alphabets are produced. We come now to tsrpes of ap- 
paratus whi(^ can be called machines, and one such machine is shown in Fig. 122. It is called 
the Kryha machine, after the name of its German inventor, who unfortunately committed 
suicide a few years ago, perhaps because the last model of his improved machine failed to im- 
press professional crsrptologists. The Kryha has a fixed semidrde of letters against which is 
juxtaposed a rotatable circle of letters. Bol^ sequences of letters can be made mixed alpha- 
bets (the segments are removable and interchangeable on each sequence). The handle at the 
right serves to wind a rather powerful steel clock spring which drives tJie rotatable platform 
on which the letters of the inner circle are mounted. In Fig. 124 can be seen something of 
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Figure 122. 



the iimer mechanism. The large wheel at the right has segments which are open or closed, 
depending upon the “setting” or key. This wheel controls the angular displacement or “step- 
ping” of the circular rotatable platform. The initial juxtaposition of the inner or movable 
alphabet against the outer or fixed one, as well as the compostion of these alphabets, is governed 
by some key or other prearrangement. The cipher equivalents must be recorded by hand. 
After each encipherment, the button you saw in the center of the panel in Fig. 123 is pushed 
down, the inner wheel is advanced 1, 2, 3, 4 . . . steps, depending on the key, and the next 
letter is enciphered, etc. The pictures I’ve shown you apply to the latest model of the Kryha; 
as regards the first model, which came on the market sometime in the 1920’s, a German math- 
ematician produced an impressive brochure showing how many different permutations and 
combinations the machine afforded. Here’s a picture of a couple of pages of his dissertation, 
(Fig. 125) but even in those days professional cryptanalysts were not too impressed by calcula- 
tions of this sort. With modem electronic computers such calculations have become of even 
less significance. 

Let us now proceed with some more complex and more secure machines. In this next il- 
lustration (Fig. 126) you see a machine which represents a rather marked improvement by a 
Swedish cryptographic firm upon the ones shown thus far. It is a mechanico-electrical ma- 
chine designated as Cryptographe B-21. Here for the first time you see a cryptographic ma- 
chine provided with a keyboard similar to that on an ordinary t 3 rpewriter. Depressing a key 
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Figiire 123. 

on this keyboard causes a lamp to light under one of the letters on the indicating bank above 
the keyboard. At the top of this machine can be seen four wheels in front of two rear wheels. 
The four front wheels are the rotating elements which drive the two rear wheels; the latter are 
electrical commutators that serve as connection-changers to change the circuits between the 
keys of the keyboard and the lamps of the indicating board. There isn’t time to discuss in 
detail the internal works which control the rotating elements and ciphering wheels, of which 
you’ll see a glimpse later, but I must show you the next step in the improvement of such ap- 
paratus, which made it possible to eliminate the really tedious job of recording, by hand on 
paper, the results of operation. This was done by means of associating a typewriter with the 
crypto-component. Here is a picture (Fig. 127) which shows the assembly — the B-21 con- 
nected to a Remington electric typewriter, modified to be actuated by impulses from the 
cryptomachine. Of course, it was natural that the next step would be to make the recording 
mechanism an integral part of the cryptomachine. This you can see in the next picture (Fig. 
128a), in which the four rotating members referred to in connection with Fig. 126 and which 
control the two commutators also mentioned in connection with that figure are seen. The 
slide-bar mechanism in Fig. 1286, at the right, is called the “cage” or “barrel” and controls 
the displacements of the printing wheel, causing the proper letter to be printed upon the mov- 
ing tape seen at the front of the machine. 

Now we come to some very important new types of electric cipher machines first conceived 
and developed in Europe but very soon thereafter, and probably independently, also in the 
U.S. In the crypto-component of these machines, the electrical paths between the elements 
representing the plaintext characters and those representing their cipher equivalents are con- 
stantly varied by multiple connection-changers with the crypto-component. In early Euro- 
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pean models of this type of machine the connection-changers consisted of a frame upon which 
insulated wires were moimted to connect in an arbitrary manner a series of contacts on one 
side of the frame to a similar number of contacts on the other side of the frame. This frame 
was slid between two fixed contact-bearing members, one on each side of the frame. By sliding 
the frame between the two fixed members, the paths between the opposite contacts on the 
latter could be varied as a whole set with a single movement of the sliding frame. A connection- 
changer of this sort is shown in schematic form in Fig. 129a, where the sliding member 10, 
slides between fixed members 11 and 12, thus changing the electrical paths between the key- 
board and the printing mechanism. The connection-changer 10 is moved to the left or right 
1,2,3, . . . positions, as determined by a cam mechanism. We won’t go into this type of ma- 
chine any further because it wasn’t long before inventors saw the advantages of using, instead 
of sUdable connection-changers, mechanisms performing a similar function but of a rotatable 
nature which we now call “electric rotors,” and which rotate, usually step-by-step, between 
circular, fixed, contact-bearing members called “stators.” Rotors and stators of this type are 
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Figure 128a. Figure 1286. 

shown in schematic form in Fig. 129b there being a left-hand stator labeled 1, three rotors 
labelled 2a, 2b, 2c, and a right-hand stator labeled 3. The connections leading away from 
stator 1 toward the left go to the keys of the keyboard; those leading away from rotor 3 to- 
ward the right go to the magnets of Ihe printer. About these elements we shall explain some 
details presently. 

In Europe, the first machine using rotors and stators was that developed by a German firm, 
the Cipher-Machine Company of Berlin, and was appropriately named the ENIGMA. Here’s 
a picture of it. Fig. 129c, in which you see a keyboard, a set of eight rotors juxtaposed in line, 
or, as we now generally say, “juxtaposed in cascade,” and a printer. This machine was ap- 
parently too complicated for practical usage and was superseded by a second model, which 
also printed and was also unsuccessful. One of the difiiculties with Ihese two models was that 
a multiple switch with many contacts to be made simultaneously was required in order to 
establish an operative encipher-decipher relationship, so that if in enciphering the letter Up, 
for example, the corresponding key on the keyboard is depressed, and a cipher letter, say F„ 
is printed; then on deciphering the letter Fe, the corresponding key on the typewriter is depres- 
sed, and the plaintext letter Dp wiU be printed. In this machine this coidd only be done by 
making the current for decipherment traverse exactly the same path through the rotors and 
stators that it had traversed in encipherment. This was the function of the multiple switch 
shown schematically in Fig. 129d, in which a machine with only six characters (A to F) is 
depicted. In the left-hand circuit diagram. Dp is being enciphered and produces F^; in the 
right-hand circuit diagram F« produces Dp. But the switching mechanisms 4 and 4' in Fig. 
129d make things a bit complicated because they are within one switching member that operates 
in one of two positions, one for encipherment, the other for decipherment, and many contacts 
must be established in one fell swoop, so to speak. I won’t go into further details as to its 
construction because a clever inventor of that German firm came up with a new idea which 
greatly simplified matters, not only in regard to the crypto-component but also in regard to 
the indicating mechanism. We may quickly explain how the matter of simplifying the indi- 
cating mechanism was accomplished, namely, by eliminating the printer altogether and re- 
placing it with a simple bank of flashlight type lamps. We’ll skip the third model of the 
ENIGMA, which was only a slightly simpler version of the fourth model, which is shown in 
Fig. 130a. This one comprised a keyboard, a bank of indicating lamps, and a set of rotors 
and stators, but no printer. 
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In Fig. 130a is seen the machine with its cover-plate down. At the front is the keyboard; 
above it, the indicator board, consisting of 26 lamps beneath glass disks upon which letters 
have been inscribed. Above the indicator board are seen four oval apertures with covers, 
through which letters can he seen. To the right of each aperture can be seen the peripheries 
of four metal scalloped wheels, the first being unmarked but the next three being labeled 1. 
A switch lever seen at the right can be set to encipher, decipher, or neutral positions. In Fig. 
130b is seen the machine with the cover-plate removed, exposing the internal crypto-compo- 
nent. Three rotors, labeled 4 in this figure, are seen, and afiSxed to them are the scalloped 
metal rings, which are not labeled. A fourth scalloped ring, labeled 11 in Fig. 130b, is afiSxed 
to another rotor-like member labeled 8 in that figure. This member looks like an ordinary 
rotor in this picture but is really a stator of special construction to be described presently. 
Perhaps it would be useful at this point to show you what ENIGMA rotors look like and these 
can be seen in Figs 131a-c. In each of these rotors there is a circle of 26 equally spaced con- 
tact pins on one face of the rotor (Fig. 131a) and a circle of 26 equally spaced contact surfaces 
on the other face (Fig. 131b). Insulated wires connect the contact pins on one face to the 
contact surfaces on the other face, these connections being made in an arbitrary, systematic, 
or unsystematic manner, depending on certain circumstances into which we need not go. 
When the rotors are juxtaposed as seen in Fig. 131c, the contact pins on one rotor are brought 
against the contact surfaces on the adjacent rotor, so that an electric current will traverse aU 
three rotors via a certain path. The large scalloped rings are for setting the rotors in align- 
ment manually when they are juxtaposed and rotated to form a portion of the key setting (see 
E^Z^R in Fig. 131c). The toothed metal ring seen in Fig. 131a is associated with a cam 
mechanism so that a rotor will be advanced one step when the preceding rotor has made a 
sufficient number of steps to permit a cam to fall into a notch in the ring. Sometimes a com- 
plete revolution will be necessary before this happens, depending upon the initial keysetting. 
The first rotor immediately to the left of the stator at the extreme right in Fig. 181b, however, 
always makes one step with each depression of the key on the keyboard. The advance of the 
rotors is similar to that of the wheels of a coimter like that of the odometer on your automobile. 

We come now to the matter of simplifying the crsrpto-component of the ENIGMA shown 
in Fig. 130b to eliminate the multiple switching mechanism shown in Fig. 129d, without much 
loss in security (or so it would seem, at least). Let us see how this simplification was accom- 
plished in the ENIGMA, by showing Fig. 129d, in connection with the first ENIGMA model. 
For this purpose I show you now Fig. 132, in which the encipher-dedpher circuitry is dearly 
seen in a machine having, for illustrative purposes, only three rotors, labeled 1,2,3, rotatable 
between two stators, the one on the left labeled 4, that on the right labeled 5. Stator 4 is fixed 
or nonrotatable in this model, and it has 26 contacts on its left face, only two of which are 
shown. These contacts are connected fixedly to the keys of the keyboard and to the lamps 
of the lampboard. Stator 5 is rotatable, but only manually, and it has 26 contact surfaces on 
its right face, only two of which are shown. But in this stator the 26 contact surfaces are 
inter-connected in pairs by 13 insulated wires passing through the member. Thus, a current 
entering one of the 26 contact surfaces on the right face goes through the stator and returns 
to one of the remaining 25 contact surfaces. For this reason it is called a “reflector” and 
serves to return a current that has come from one of the 26 contacts on the fixed stator at the 
extreme right, then through the rotors and into the reflector via one path, returns through the 
rotors and back into the stator via a different path, emerging at one of the 25 other contacts 
on the left face of the stator at the extreme right. This circuitry assures that in a particular 
setting of the machine, if Yp = Z„ for example, then Zp = Y„ that is, the dpher is redpro- 
cal in nature. It also has as a consequence that no letter can be endphered by itself, that is, 
Yp, for example, cannot be represented by Y„ no matter what the setting of the cr 3 rpto-com- 
ponent is and this is true of all the other letters of the alphabet with regard to the ENIGMA. 

If you like you may trace the path traversed by the current in Fig. 132 in endpherment and 
decipherment, where Zp = Ye and Ye = Zp, but Zp cannot be represened by Z„ nor can Yp 
be represented by Ye. I have already told you briefly about how the rotors are advanced. 
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In the ENIGMA shown, the total number of encipherments that can be made before the key- 
setting of the machine returns to its original setting, as seen through the windows 1 referred 
to a few moments ago when showing you the first picture of the fourth model ENIGMA, is 
16,900, viz, 26*— 26®, and not 26*, for technical reasons I won’t go into now. 

Power for the electrical circuits is provided by small dry cells in the machine. This model 
enjoyed a fair degree of financial success, but when Hitler came into power further promotion 
and sales of the ENIGMA were prohibited. Suffice it to say that it became the basis for ma- 
chines used by the German Armed Forces in World War II. 

In the United States, in about the year 1910, a California inventor named Edward H. Hebern 
(Fig. 133) began to develop cipher machines, but he was merely traveling along roads that had 
thus far led other inventors nowhere. In about the year 1918 he struck out along a new path 
in America. I don’t know whether he independently conceived the idea of a machine using 
an electric rotor or had, in his research come across patents covering very recently invented 
European electrical cipher machines. At any rate, Hebem’s first application for a patent 
covering a rotor machine, which he called an “electric «)de,” was filed on March 31, 1921, and 
a patent was issued on 30 September 1924. Figure 134 shows the first machine he had built. 
You will note that the crypto-component had but one rotor, and like the early models of the 
ENIGMA it was associated with a printing mechanism, a typewriter operated electrically. 
Hebem’s cipher system was also similar in nature with that of the first two ENIGMA models — 
a full reversing switch was essential since the electric current had to traverse exactly the same 
path in decipherment as it had in encipherment. I don’t think that he ever conceived the 
idea of using a refiector; perhaps he was too late. At any rate, he never incorporated that 
idea in any of his machines. Moreover, I don’t think he had any idea as to the cryptologic 
advantages and disadvantages of a crypto-component using a “single traverse” or “straight 
through” system of rotors, as compared with one using a “double-traverse” or “twice-through” 
system of rotors with a refiector. But we won’t go into that here, for it’s a pretty involved 
piece of business. 

But Hebem’s rotors had a virtue not possessed by those of the ENIGMA machines, and 
not incorporated in the rotors of the latter, namely, the wirings of the rotors could readily be 
changed by the user of the Hebern machine, a feature of great importance in cryptosecurity 
(Fig. 135). Hebern interested our Navy in his 3-rotor model (Fig. 136) and as a result of 
conferences with Navy cryptanalysts he built the 5-rotor model which is seen is Fig. 137. An- 
other very important security feature I have thus far failed to mention as regards the Hebern 
rotors was that they could be inserted in a “right-side up” or in an “upside-down” position 
in the machine, which could not be done with the ENIGMA rotors. The Navy liked the 5- 
rotor model, even though it was not a printing machine, assuming properly that this could be 
added later on. Therefore, the Navy placed a purchase order for two such machines on 30 
July 1921 and was considering purchasing a rathar large number of them later. Lieutenant 
Strubel, then Chief of the Navy’s Code and Signal Section of the Office of Naval Communi- 
cations but now a retired Vice Admiral, asked me to study the machine for its cryptosecurity. 
Navy had but two machines, neither of which could be made available, so 1 induced the Chief 
Signal Officer to buy a couple of them for Army study. The order was placed on 7 October 
1924. The rotor wirings of the Army’s machines were altogether different from those of the 
Navy, a fact which I discovered simply by asking Strubel to encipher a few letters on his ma- 
chine, using settings I specified. After some study I reported that in my opinion the security 
of the machine was not as great as Navy thought. The result was a challenge, which 1 ac- 
cepted. Navy gave me ten messages put up on its machine, and I was successful in solving 
them. There isn’t time to go into the methods used, but if you are interested you can find 
them described in my brochure entitled Analysis of a Mechanico-Electrical Cryptograph, Part I 
(1934), Part II (1935). 

Hebern built several more models for Navy, and these had printing mechanisms associated 
with them, but Navy dropped negotiations with Hebern when it became obvious that he was 
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Figure 133. 



not competent to build what Navy wanted and needed. Navy then established its own crypto- 
graphic research and development unit at what is now known as the Naval Weapons Plant in 
Washington. Army developed at the Signal Corps Laboratories at Fort Monmouth a ma- 
diine known as Converter M-134, and here’s an illustration (Fig. 138) showing what it looked 
like. Army and Navy went separate ways in such work for a number of years but fineiUy, in 
1938 or 1939, close collaborating brought as a result an excellent machine which was developed 
and produced in quantity by the Teletype Corporation in Chicago. This machine was dis- 
tributed and used very successfully by all our Armed Forces from 1940 to the end of World 
War II and for some years thereafter. In accordance with Navy nomenclature it was desig- 
nated as the ECM Mark II, ECM standing for “electric cipher machine”; in the Army it was 
designated as the SIGABA, in accordance with a nomenclature in which items of Signal Corps 
cr 3 q)tographic material were then given short titles with the initial trigraph SIG. 

The ECM-SIGABA is a rather large machine requiring a considerable amoimt of electric 
power and much too heavy to be carried about by a signal operator performing field service. 
It was safeguarded with extreme care and under strictest security regulations during the whole 
period of World War II operations. None of our Allies was permitted even to see the ma- 
chine, let alone have it. The British had their own electric cipher machine, which they called 
TYPEX. In order to facilitate intercommunication between U.S. and British forces, adaptors 
were developed so that messages could be exchanged in cipher between American and British 
units. This system of intercommunication worked satisfactorily and securely. 
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Certain improvements in the method of usage and the development of special components, 
to be associated with the ECM-SIGABA for automatic decipherment by perforated tapes, 
were introduced during the wartime employment of these machines. But the SIGABA-ECM 
as originally developed and produced became obsolete some years after the close of hostilities 
when newer and better machines developed by NSA cryptologists and engineers replaced them, 
but not because there were ever any indications that messages enciphered on the machine had 
been deciphered by the enemy. As a matter of historical fact, it may be stated that aU enemy 
efforts to solve such messages were fruitless, and it is also a fact that no machines were ever 
captured by the enemy; nor where there ever any suspicions that a machine had been exposed 
to enemy inspection at any time. Once and only once were there any apprehensions in this 
regard, when, through a careless disregard of specific instructions, a truck and an attached 
trailer, in which this machine and associated material were housed, were stolen during the 
night when parked in front of the headquarters of the 28th Division during the Battle of the 
Bulge. A great search was instituted, during the course of which a river was diverted, and 
the trailer, with all its contents intact, was found resting on the former bed of the diverted 
stream. The episode terminated in court-martial proceedings and there were no further in- 
cidents of this sort. Let me add that such apprehensions as were entertained at the tune of 
this temporary loss of custody of the machine were based not upon the possibility that its use- 
fulness was at an end but upon the fear that the Germans would make “Chinese copies” of 
it and thus be in a position to turn our very valuable weapon against us. 

About five years before the SIGABA was put into service, the Army’s need for a small cipher 
machine for field use became obvious. The strip cipher system was not suitable for this pur- 
pose, nor was the Army’s first keyboard-operated electrical rotor machine. Converter M-134, 
suitable, for reasons already indicated in connection with the SIGABA. The sum of $2,000 
was allotted by the Army to the Chief Signal Officer for the development of a cipher machine 
small enough to be suitable for field usage but also affording adequate security. The funds 
were naturally turned over to the Signal Corps Laboratories at Fort Monmouth, New Jersey, 
for this development. The military director of the laboratories, spuming all preferred tech- 
nical guidance or assistance from the Signal Intelligence Service and deciding that his staff had 
sufficient know-how without outside assistance, developed a machine which required no elec- 
tricity, being aU-mechanical. On its completion the model was sent to the Signal Intelligence 
Service for a cryptosecurity test. Two short messages were enciphered by the Chief of the 
SIS, using settings of his own selection. He then handed the messages and the model over to 
me as Technical Director, and I turned them over to two of my assistants. The reason for 
turning over the model with the messages was that it must be assumed that under field con- 
ditions machines will be captured. One of the two test messages was solved in about 20 min- 
utes; the other took longer — 35 minutes. This test brought an ignominious end to the SCL 
development, brought about by the failure on the part of the military director of the SCL to 
recognize that cryptographic invention must be guided by technically qualified cryptanal 3 rtic 
personnel. Unfortunately, all the available funds had been expended on this unsuccessful 
attempt; none was left for a fresh start on a development with technical guidance from the 
SIS. It was about this time that a small mechanical machine which had been developed and 
produced in quantity by a Swedish engineer in Stockholm named Hagelin (Fig. 139) was 
brought to the attention of the Chief Signal Officer of the U.S. Army by a representative of 
the Hagelin firm. The SIS was asked to look into it and, as technical director, I turned in an 
unfavorable report on the machine for the reason that although its cryptosecurity was the- 
oretically quite good, it had a low degree of cryptosecurity if improperly used — and practical 
experience had taught me that improper use could be expected to occur with sufficient fre- 
quency to jeopardize the security of aU messages enciphered by the same setting of the machine, 
whether correctly enciphered or not. This was because the Hagelin machine operates on what 
is termed the key-generator principle, so that when two or more messages are enciphered by 
the same key stream or portions thereof, solution of those messages is a relatively simple mat- 
ter. Such solution permits recovery of the settings of the keying elements so that the whole 
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stream can be produced and used to solve messages which have been correctly enciphered by 
the same key settings, thus making a whole day’s traffic readable by the enemy. I tried to 
assure the CSO that my opinion was not motivated by a factor commonly called “NIH” — 
“not invented here,” but I was overruled by my military superiors, and properly so, because 
neither the SIS nor the SCL had developed anything that was better than the Hagelin machine, 
or even as good, with all its mechanical dedciences and cryptographic weaknesses taken into 
consideration. Accepting, though somewhat reluctantly, the weU-considered directive of the 
CSO, the SIS pointed out where improvements could be made, and the desired modifications 
were incorporated in the machine, which became known as Converter M-209. Over 100,000 
of them were manufactured in 1942-1944 by the Smith-Corona Typewriter Company, at Groton, 
New York. Here’s an illustration (Fig. 140) showing the machine, which was extensively used 
by all our Armed Forces during World War II, and here’s another (Fig. 140) showing its inter- 
nal mechanism. It turned out that under field conditions the fears upon which I had based 
my personal rejection of the Hagelin machine proved to be fuUy justified — a great deal of 
traffic in it was solved by the Germans, Italians, and Japanese. If I was chagrined or suffered 
any remorse when I learned about the enemy successful attacks on M-209 traffic, those feel- 
ings were generated by my sense of having failed myself to think up something better than 
the M-209 despite the shortsighted attitude of the military director of the SCL. 




Figure 140a. Figure 140&. 

With the introduction of printing telegraph or teleprinting machines for electrical communi- 
cations, the need became pressing for a reliable and practical cryptographic mechanism to be 
associated or integrated with such machines. The first apparatus of this sort in the U.S., 
shown in this photo (Fig. 141), was that developed by the American Telephone and Telegraph 
Co., in 1918, as a more-or-less simple but ingenious modification of its ordinary printing tele- 
graph. First, a few explanatory words about the basic principles of the modem teleprinter may 
be useful. This principle employs what is called the “Baudot Code,” that is, a system in 
which permutations of two different elements taken in groups of five are employed to represent 
characters of the alphabet. Curiously enough, Francis Bacon was the first to employ such a 
“code” way back in the early 17th Century, and I showed you the one he used in Lecture No. 
II (see Fig. 31 on p. 34). 111080 two elements in Bacon’s “code” were a’s and 6’s; he used but 
24 of the 32 permutations available (2'' = 32). For electrical communications the two elements 
may be positive and negative currents of electricity, or the presence and absence of current, 
the latter system being often referred to as being composed of “marking” and “spacing” ele- 
ments, respectively. The illustration below (Fig. 142) depicts the Baudot or “5-unit code” in 
the form of a paper tape in which there are holes in certain positions transverse to the length 
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of the tape. The holes are produced by a perforating mechanism; the small holes running the 
length of the tape are “feed-holes” by means of which the tape is advanced step by step. You 
will note that there are five levels on which the perforations appear. The letter A, for example, 
is represented by a perforation only on the 1st and 2nd levels, the 3rd, 4th and 5th levels re- 
maining unperforated; the letter I is represented by holes in positions 2 and 3, no holes on the 
other three levels, etc. The English alphabet uses 26 of the 32 permutations; the remaining 6 
permutations are used to represent the so-called “stunt characters,” which I will now explain. 
The third and fourth characters from the right-hand end of the tape are two permutations 
labeled “letters” and “figures,” respectively. These are equivalent to the “shift” and “un- 
shift” keys on a typewriter keyboard, for “lower” and “upper” case. When the “letters” key 
is depressed, the characters printed are the 26 letters of the alphabet (aU capital letters); when 
the “figures” key is depressed the characters represented are sumlar to those printed on a 
typewriter when the “shift” key is depressed. The second, third, and fourth permutations at 
the left-hand end of the tape are also stunt characters and represent “line feed,” “space,” and 
“carriage return,” and they perform electrically in a teleprinter what is done by hand on a 
typewriter: “line feed” causes the paper on which the message is printed to advance to the 
next line; “space” does exactly what depressing the space bar on a typewriter does, etc. When 
there are no holes anywhere across the tape, the character is called a “blank” or “idling” char- 
acter — nothing happens; the printer does no printing, nor is there any “stunt” functioning by 
the printer, but the tape merely advances. 

In modifying the standard printing telegraph machine to make it a printing telegraph cipher 
machine, or, to put the matter in a slightly different way, in developing the printing telegraph 
cipher machine the American Telephone and Telegraph Company was fortunate in having at 
its disposal the services of a 23-year old communications engineer named Gilbert S. Vemam, 
(Fig. 143) who conceived a brilliant principle and an automatic method for enciphering tele- 
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printer communications. The principle and method turned out to be so useful and valuable, 
not only in the U.S. but also internationally, that it has come to bear his name and is often 
referred to as the “Vemam principle,” the “Vemam rule,” the “Vemam mod-2 addition,” etc. 
Vemam saw that if in accordance with some general but invariant rule the marking and spacing 
elements of a 5-unit code group were combined one by one with those of another 5-unit code 
group, which would serve as a keying group, and the resultant 5-unit group transmitted over 
a circuit and combined at the receiver with the SEime keying group in accordance with the 
same general rule,^^ the final resultant would be the original character. Vemam conceived 
the idea early in 1918, or perhaps in late 1917. I have a copy of Vemam’s circuit diagraTn, 
dated and witnessed on 27 Feb 1918, but Hie application for a patent thereon, with his name 
as inventor, was filed in the U.S. Patent Office on 13 September 1918, and Patent No. 1,310,719 
was granted on 22 July 1919, covering the invention entitled a “Secret Signaling System.” 

The following more detailed description of Vemam’s patent on the foregoing cipher system 
is extracted from a paper‘d written by one of the A. T. & T. Company’s engineers who was as- 
sociated with Mr. Vemam at the time the invention was conceived and who, a few years after 
retirement from that company, became one of NSA’s consultants: 

“This patent describes an “on-line” system, each character being enciphered, immediately 
transmitted, and in turn deciphered without delay at the receiving terminal. Thus, characters 
of a message in perforated tape form are automatically combined with other or key characters 
which are transmitted over the circuit. At the receiver an identicsd group of key characters is 
used to provide signals for combination with the arriving signals, character by character, to pro- 
duce the original message. The combining rule for these operations disclosed in the patent was 
one in which like code elements produced “spaces” and unlike elements, “marks,” as shown be- 
low. 

The cipher message tape prepared in this way is unintdUgpble in form and may be sent to the 
receiving station by messenger or by mail, or if desired, it may be transmitted by wire or radio 
and reproduced by another machine perforator at the receiving point. The cipher tape is there 
run through the message transmitter, where ite characters combine with those of a duplicate key 
tape to reproduce the original message, which will be printed out in page form and in “plain 
text.” 

LBNGTO OF KEY TAPE 

With the system as described above, the key tape must be at least as long as the sum of all 
the message tapes used with it, as the messages will lose their secrecy to some extent if the key 
tape is used repeatedly. The use of a short repeating key may give sufficient secrecy for some 
uses, however. 

A roll of tape 8 inches in diameter contains about 900 feet of tape and would serve to encipher 
about 18,000 words counting five printed characters and a space per word, without repeating the 
key. If sent at an average speed of 45 words per minute, this number of words would require 
400 minutes or nearly 7 hours to transmit. 

In order to reduce the amount of key tape required for handling large amounts of traffic, the 
“double key” system was devised.^" In this system two key tapes are used, the ends of each tape 
being glued together to form a loop preferably about seven feet in circumference. The tapes 
should differ in length by one character or by some number which is not a ffictor of the number of 
characters in either tape. A separate transmitter is used for each tape, and the characters of 
the two key tapes are combined, by a method similar to that shown in Figure 144, with those of 
the message tape to form the cipher message. 

The result is the same as though the two key tapes were first combined to produce a long single 
non-repeating key, which was later combined with the message tape. This long, single key is 
not, strictly speaking, a purely random key throughout its length as it is made up of combina- 
tions of the two original and comparatively short key tapes. The characters in this key do not 



In this system which uses only two different symbols or dements, the so-called “binary code,” the com- 
bining rule is its own inverse. 

Parker, R. D. “Recollections Concerning the Birth of One-Time Tape and Printing-Telegraph Machine 
Cryptography.” NSA Technical Journal, VoL I, No. 2, July 1956, pp. 103-114. 

By L. F. Morehouse, an A.T. & T. Company equipment engineer. See U.S. Patent No. 1,356,546, “Ci- 
phering System,” granted 26 October 1920 — WFF. 
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Figure 143. 



Figure 144. 




repeat in the same sequence at comparatively short regular intervals, however, as would he the 
case if only one key tape loop were used. 

The number of characters in this equivalent single key is equal to the product of the number 
of characters in the two tape loops, and may easily exceed 600,000 before any part of the key 
begins to repeat. If proper care is taken to use the system so as to avoid giving information to 
the enemy regarding the lengths of the two key tape loops or their initial settings and to avoid 
the possibility of ever re-using any part of the resultant single key, this system is extremely dif- 
ficult to break even by an expert cryptanalyst having a large number of messages and full 
knowledge of the construction of the machine and its method of operation.” 

The foregoing double-key-tape system was placed into operation in 1918, on three start-stop 
circuits which were used for intercommunication among four stations serving Washington, 
New York, Hoboken and Norfolk, and which according to Parker [see footnote 20 above,] “con- 
tinued in operation for many months, even after the end of the war.” In addition, a Signal 
Corps Company was organized to go to Europe with new equipment for installation of printing- 
telegraph circuits in France. This Signal Company was about ready to sail when the Armislice 
was signed November 11, 1918. 

Upon my return to Riverbank in April 1919, after being demobilized, 1 became an interested 
party in a rather warm argument conducted by letters exchanged between Colonel Fabyan, 
the Chief Signal Officer, the Director of Military Int^gence, and the War Department, re- 
garding the cryptosecurity of the cipher printing telegraph system as used by the Signal Corps. 
The argument ended by successfully meeting a challenge by the Signal Corps to prove Fabyan’s 
contention. The challenge consisted in sending Fabyan, on 6 October 1919, and requesting 
him to solve, the cipher tapes of about 150 messages selected from one day’s traffic in the 
system. On 8 December 1919 Fabyan sent a telegram to the Chief Signal Officer notifying 
him that solution had been accomplished. In order to prove that this was true, I sent a per- 
forated cipher-message tape to each of the officers named above. In order to decipher these 
messages the Chief Signal Officer had to use his own key tapes, thus proving that not only had 
Riverbank solved the system but had recovered both key tapes which had been employed in 
enciphering the challenge messages, so that Riverbank was in a position to produce the plain 
text of any of the latter on request, if further proof of solution was needed or desired. I wrote 
a monograph on the solution, consisting of a basic paper of 21 typewritten pages, an Addendum 
1 of 10 pages, an Addendum 2 of 25 pages and an Addendum 3 of six pages; a copy of each of 
these documents was sent to Washington. The solution was accepted with mixed feelings in 
Washington, especially on the part of Brigadier General Marlborough Churchill, the Director 
of Military Intelligence, who had signed a letter to the Chief Signal Officer, dated 8 August 
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1918 prepared by Capt. Yardley to the effect that the cipher system in question “is considered 
by this office to be absolutely indecipherable.”*^ General ChurchiU had the duty and courtesy 
to write a congratulatory letter to Colonel Fabyan, dated 24 March 1920, the final paragraph 
of which is as follows: 

“Your very brilliant scientific achievement reflects great credit upon you and your whole per- 
sonnel. It would be impossible to exaggerate in paying you and Riverbank the deserved trib- 
ute for this very scholarly accomplishnient.” 

The paper by Mr. Parker (see footnote 20) closes with the following final paragraph: 

“Perhaps some day Mr. Friedman will tdl of the part that he and the Riverbank Laboratories 
played in the cryptanalytic phase of this development.” 

Mr. Parker was not aware of the fact that what he suggested had not only been done once, 
but twice. The first time was immediately after the solution when copies of the writeup men- 
tioned a moment ago on page 101 had been sent to Washington where they had met the fate 
that often happens to documents of limited or special technical interest — complete disappear- 
ance in the voluminous files of bureaucracy. The second time was soon after the end of hos- 
tilities of World War II, when it was discovered that a certain outfit I won’t name was using 
the double-tape keying system for its teleprinter communications. I nunmaged through my 
own files and uncovered the handwritten manuscript of certain parts of what I had written at 
the close of the successful solution of that system while at Riverbank. My second write-up 
is a classified document, dated 21 July 1948, the subtitle of which is “Can Cryptologic History 
Repeat Itself?” It is possible that this write-up can be made available to those of you who 
are interested in reading it, if proper authority grants permission. 

Mr. Parker’s paper (see footnote 20, above) devotes a good deal of space to the contention 
that the only reason why the double-tape keying method was adopted was that the Signal 
Corps and specifically its representative. Colonel Mauborgne, “complained about the diffi- 
culties that might be experienced in the preparation and distribution of one-time random key 
tapes and seemed inclined to disapprove of the proposed system because of these difficulties. 
Since the system, when properly used, seemed obviously to be one which gave absolute secrecy, 
a discussion arose on the value of the system and on methods which might be devised for the 
production and distribution of long one-time key tapes having characters arranged at random.” 
Parker points out that the original method of use contemplated the use of long tapes of this 
nature and that he and his associates felt that the problem of producing and distributing long 
tapes “while presenting a challenge, was not impractical.” I am glad to admit that they 
were right, because during World War II and for years afterward tapes of this nature were 
produced by special machinery (in some cases as many as five copies being perforated and the 
sections numbered automatically in a single operation). Distribution of and accounting for 
the tapes proved practical, too, and aside &om an occasional error involving the re-use of a 
once used tape, absolutely secure interconununication by radio printing telegraphy was asstrred 
and was used between and among large headquarters where the volume of traffic justified the 
use of this equipment. The principal advantage was the simplicity of crypto-operations — ^no 
rotors to be set, no setup of rotors to be enciphered, no checking of encipherment by decipher- 
ing the message before transmission, etc. 

The A. T. & T. Company Printing Telegraph Cipher equipments purchased by the Signal 
Corps were withdrawn soon after Riverbank proved the double-key-tape system insecure. 
The machines went into storage, when in due course most of them were dismantled. But 
after I left Riverbank at the end of 1920 and had joined the Chief Signal Officer’s staff in 



“ The letter consisting of a single parag^raph stated: “1. The mechanical means of enciphering messages 
with an arbitrary, meaningless running key of 999,000 letters, provided no two messages are enciphered at 
the same point on the tape as explained to Major Mauborgne, Signal Corps, and Captain Yardley, Military 
Intriligence Branch, by officials of the American Triegraph and Telephone Company, is considered by this 
office to be absolutely indecipherable.” 
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Washington, I induced the Chief Signal Officer to resuscitate two equipments. These I em- 
ployed, believe it or not, in compiling codes, called Division Field Codes, for use in training or 
in an emergency. I won’t undertake to explain how I performed this stunt, for it was a stunt, 
but it worked very successfiiLly. The codes were duly printed, issued and used until there was 
no longer any need for codes of this type. 

Cipher printing telegraphy was placed upon the shelf and more or less forgotten by Signal 
Corps communications engineers from 1920 until soon after Pearl Harbor. However, the 
leading members of the S. I. S. maintained a theoretical cryptanalytic interest in such equip- 
ment, and in 1931 there came an opportimity to test such theories as were developed by tiiem 
when a machine produced by the International Telephone and Telegraph Company evoked the 
interest of the Department of State as a possible answer to the needs of that Department for 
rapid and secure cryptocommunications by radio. The Secretary of State requested the 
Secretary of War to study the machine, which was to be associated with a standard teleprinter, 
and to study it only from the point of view of security. For this purpose messages enciphered 
by the Chief of the Communications and Records Division of the Department of State were 
provided. Here are two pictures of the teleprinter attachment. (Figs 145a, and 145b.) It is a 
source of satisfaction to be able to tell you that the S.I.S. quickly solved the test messages 
and therefore reported that the machine was quite insecure; but it is with much regret that I 
must now tell you who invented and developed the machine. It was a retired officer of the 
Signal Corps and none other than my old friend Colonel Hitt. I was as embarrassed to tell 




Figure 145a. Figure 1456. 

him about the results of our test as he was to force himself to listen to what I had to say about 
the inadequacies of his brain child. As is so often the case, when a competent technician has 
to neglect his technical studies because of the pressure of a dmini strative duties, he unfortu- 
nately finds it very difficult to keep abreast of new developments and progress in a field in 
which he was at one time an expert. The I. T. & T. Company, having spent a great deal of 
money on the development of a machine which hardly presented any room at all for improve- 
ment because the principles underlying it were so faffity, dropped further work on it. Colonel 
Hitt, I am glad to say, readily survived the disappointment and was well enough in 1942 to 
be able to return to active duty during World War II and retired a second time at the end of 
hostilities. He lives a quiet life now, on a small farm near Front Royal, Virginia. 

Beginning about 1938, Mr. Frank B. Rowlett, one of my associates, and I kept urging that 
there was or would be real need for new and improved machines for protecting teleprinter com- 
munications. There was not only a complete lack of interest in such apparatus, but what was 
perhaps a more important factor in the failure to continue work in this field was the lack of 
Signal Corps funds for research and development for such work. 

Our more-or-less sudden entry into World War II, after 7 December 1941, immediately 
brought a great need for cipher printing telegraphy, especially for radiocommunication, but 
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there was no apparatus for it whatever — ^not a single one of those A. T. & T. Company ma- 
chines of 1918-1920 was in existence. But the S.I.S. did have drawings in readiness, and the 
development of the machines was given as a priority task to the Telets^e Corporation, because 
that firm had proved that it had the necessary know-how when it produced the SIGABA- 
ECM’s for us. Navy had less need for dpher printing telegraphy than Army because the use 
of printing telegraphy by radio was then not practicable for ships at sea. However, Navy did 
have a need for such apparatus for its land communications and joined Army in the procure- 
ment thereof. The machines were produced with a remarkable speed by the Teletype Corpora- 
tion. Most of them were allotted to Army, a few to Navy. The Army called the machine the 
SIGCUM; the Navy called it CSP-1515. Under heavy use in service, improvements were 
made both in regard to mechanical and electrical features and in regard to methods of keying, the 
use of indicators, etc. But I must tell you that before those machines became available in 
quantity there was only one recourse: we went back to the use of the double-key-tape method 
using standard teletsrpe apparatus. The cipher was practically the same as it was in 1920, but 
we had safer methods of key-tape production and indicators for their use. The S.I.S. and the 
equivalent xinit in Navy were not happy because operator’s errors left messages open to solution, 
so that when the new cipher machines were ready they were pressed into service as soon as pos- 
sible, priority being given to circuits with heavy traffic. 

Cryptographic equipments of the foregoing type fall in the category of apparatus for protect- 
ing literal cryptocommimications because the latter employ letters of the alphabet; but 
apparatus for protecting cifax transmissions, that is, picture or facsimile transmissions, and 
apparatus for protecting ciphony transmissions, that is, telephonic communications, were 
also developed. But there isn’t time to go into details with regard to machines emd apparatus 
for these last two categories of cr 5 q)to-equipments although the history of their development is 
rather fascinating and very important. I cannot refrain, however, from adding, that in every 
case except one, the apparatus was produced by commercial research and development firms 
with direct guidance from the cryptologists of the Army and the Navy. The one exception is, 
I believe, in the case of the extremely high security ciphony system and equipment developed 
and built by the A. T. & T. Company. It was called SIGSALY. There were six terminals, 
each of which cost over $1,000,000. But NSA cryptologists and engineers have produced 
smaller and better equipments based upon SIGSALY principles, and such equipments are bound 
to play extremely important roles in any wars in the future. 

So much for the history of the developments and progress m cnyptographic apparatus at this 
point. I shall return to that phase of cryptologic history before the dose of this lecture. Right 
now I shall say a few words about the history of the developments and progress in cryptanalytic 
apparatus. 

The solution of modern cryptocommunication systems has been facilitated and, in some 
cases, made possible only by i^e invention, development, and application of highly spedalized 
cryptanalytic machinery, including apparatus for intercepting and recording certain types of 
transmissions before crytanalysis can even be undertaken. One must understand the basic 
nature of the problem which confronts the cryptanalyst when he attempts to solve one of these 
modem, very complex cryptosystems. First of all he must be given the crjrptocommunications 
in a form which makes them visible for inspection and study. Usually they are characters (let- 
ters or numbers) in the case of literal communications, or they are electricsd signals of a record- 
able type in the case of cifax or dphony communications. Next he must have available to him 
instrumentalities that will assist him in his analytical work, such as machinery for making fre- 
quency counts, comparisons of sequences, etc., and this, in the case of complex systems, must be 
done at high speed. Cryptanalysis of modem cryptosystems requires testing a very great num- 
ber of assumptions and hypotheses because sometimes astronomically large numbers of possi- 
bilities, i.e., permutations and combinations, must be tested one after the other until the correct 
answer is foimd. Since the advent of high-speed machinery for such purposes, including elec- 
tronic digital computers about which so much is being heard and read nowadays, the cryptana- 
lyst isn’t discouraged by these astronomically great numbers of possibilities. 
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Perhaps long before my time crsnptanalysts in Europe discovered that the use of sliding strips 
of paper could sometimes facilitate reaching a solution to a cryptanalytic problem, but so far as 
I am aware the very first cryptanalytic aid made in the U.S. is the one shown in Fig. 145, which 
is a picture of what I made at Riverbank and which I called the PolycUphabet. It was useful 
in solving ciphers which today are regarded as being of the very simplest types. When I came 
to Wasliington after leaving Riverbank, I wasn’t troubled by a plethora of ideas for cr 3 rptan£d 3 rtic 
aids — I was preoccupied with devising and inventing cryptographic aids and machines. But 
I did now and then develop and try out certain ideas for cryptanalytic aids, frequency counters, 
comparison or coincidence machinery, and the like. Why didn’t I think of IBM machines? I 
did, but what good did that do? Did the Signal Office have any such machines — or even one 
dollar for their rental? You know the answer to that without my spelling it out. There 
wasn’t any use even in suggesting that IBM machines could be of assistance to me — remember, 
now, that I’m talking about the years from 1921 to 1933, and in the last-named year we were in 
the depths of a great economic depression. But one day in the summer of 1934 I learned by a 
devious route (Army and Navy were not then sharing secrets) that the Navy Code and Signal 
Section had an IBM machine or two, and my chagrin was almost unbearable. Not long after- 
wards I learned that a certain division of the Office of the Quartermaster General in the Muni- 




Figure 146. 

tions Building had an IBM installation which had been used for accounting purposes in connec- 
tion with the C.C.C. — the Civilian Conservation Corps, established to provide work and subsist- 
ence for young men who could find no jobs in the depression. I also learned that a new officer had 
just been assigned to head that particular division — and that he just had no use for the new fan- 
gled-ideas of his predecessor and wanted to get rid of those nasty IBM machines. But the con- 
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tract with IBM still had some months to run before the lease expired and either the machines 
would sit idle or the Government would lose money by terminating the contract before the due 
date of expiration. This annoyed me, but it also gave me an idea and I wrote the following 
memorandum: 

30 October 1934 

Major Akin: 

In many years service here I have never once “set my heart on” getting something I felt 
desirable. But in this case 1 have set my heart on the matter because of the tremendous load 
it would lift off all our backs. 

The basic idea of using machinery for code compilation is mine and is of several years’ stand- 
ing. The details of the proposed system were developed in collaboration with Mr. Case of the 
Int. Bus. Machines Corp. 

I regard tbia as one of my most valuable contributions to the promotion of the work for which 
we are responsible. 

Please do your utmost to put this across for me. If you do, we can really begin to do worth- 
while cryptanalytic work. 

Attached to the memo was a brief explanation amounting to what I’ve told you about that 
IBM installation in the Office of the Quartermaster General. Note that I placed the emphasis 
upon the burden that would be lifted from cryptographic work by using the IBM machinery, 
thus leaving more time for cryptanalytic work. This was because the responsibilities of the 
S.I.S. for cryptanalytic operations were at that time restricted purely to theoretical studies. 
Studies on cryptanalytic work on foreign cryptosystems had been a responsibility of G-2 of the 
General Staff until 1929, when that responsibility had been transferred to the Chief Signal Officer 
and the Signal Corps in the year named. But the Signal Officer had very little money to use 
for that purpose, and, besides that, the Army Regulation applicable thereto specifically restricted 
cryptanalytic operations on foreign communications to wartime. And more to the point was 
the fact that there was no material to work on even if funds were available, because the Army 
had at that time no intercept stations whatever, anywhere in or outside the U.S. But that’s 
another story, and I’ll proceed to the next point, which is that my memo to Major Akin produced 
results. Just a half month after I wrote and put it in his “In” basket I got the machines moved 
from the Office of the Quartermaster General to my own warren in the Office of the Chief Signal 
Officer! That memo must have been potent magic. 

Once having demonstrated their utility to the Chief Signal Officer, the almost prematurely 
terminated contract with IBM was renewed — and soon expanded. I don’t know how we could 
have managed without such machines during World War II. 

We built or had built for us by IBM and other concerns adaptors to work with standard IBM 
machines; we constructed or had constructed for us by commercial firms highly specialized 
cryptanalytic apparatus, machines and complex assemblies of components. Under wartime 
pressures fantastic things were accomplished and many were the thrills of gratifying achieve- 
ment when things that just couldn’t be done were done — and were of high importance in military, 
naval and air operations against the enemy. 

Even were time available 1 couldn’t show you pictures of some of the high-class gadgets we 
used, neither is it permissible to say more than I have already SEud about them, even though it 
is no longer a deep secret that electronic computers are highly useful in cryptologic work. 

To the layman the exploits of professional cryptanalysts, when those exploits come to light as, 
for example, in the various investigations of the attack on Pearl Harbor, are much more fascinat- 
ing than those of cryptographers, whose achievements in their field appear in comparsion to be 
dull or tedious to the layman. But long consideration of the military importance of COMSEG as 
against COMINT leads me to return to something I mentioned at the very begininng of this 
lecture, when I made a statement to the effect that cryptography and crs^ptanalysis represent 
the obverse and reverse faces of the same single coin. In closing this lecture I will expand that 
statement a bit, and in so doing perhaps formulate a dictum which we may call the law govern- 
ing the minting and usage of the cryptologic combat coin. It would run something like this: 
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When an officer is selected to command a fighting unit, an efficient appointing authority 
gives him and entrusts into his care a top secret, magic talisman of great potency, a coin which 
is called his cryptologic combat coin, and which, as is usual in the case of all but trick coins, has 
two faces, a COMINT face and a COMSEC face. When given to him that coin should be in mint 
condition, it should be bright and shiny on both faces, and he should strive his utmost to keep 
them both that way. If, to begin with, he is given a coin that is tarnished a bit on both faces, he 
is really starting out with a great handicap, no matter how good he and his forces are in respect 
to size, equipment, training and ability. If he keeps both faces bright and shiny, he stands a good 
chance of winning a battle even if his forces are inferior in size, etc., compared with those of the 
enemy. But if he lets either face of his coin become dull from indifference, carelessness, or 
ignorance, he wiU almost surely lose the battle, even if his forces are superior in size, etc., com- 
pared with those of the enemy. 

As a remarkable example of the validity of the foregoing dictum, an example that comes 
directly from the two Japanese Navy officers who wrote Midway. The Battle that Doomed Japan 
(see footnote 12 above), let me quote the initial paragraphs of the Preface to their book (p. xiii): 

“For Japan, the Battle of Midway was indeed a tragic defeat. The Japanese Combined Fleet, 
placing its faith in “quality rather than quantity,” had long trained and prepared to defeat a 
numerically superior enemy. Yet at Midway a stronger Japanese force went down to 
defeat before a weaker enemy. 

Not only were our participating surface forces far superior in number to those of the enemy, 
but the initiative was in our hands. Nor were we inferior, qualitativdy, in the crucial element 
of air strength, which played the major role throughout the Pacific War. In spite of this we 
suffered a decisive defeat such as the modem Japanese Navy had never before experienced or 
even dreamed possible.” 

Earlier in this lecture (see p. 134), I quoted two other paragraphs from this same book, in 
which the Japanese authors make perfectly clear the reasons for the loss of the Battle of Mid- 
way, reasons which have also been stated by other writers. The cryptologic combat coin our 
Navy entrusted to Admiral Nimitz was highly polished and bright on both sides; the one the 
Japanese Navy entrusted to Admiral Yamamoto was dull on both sides to begin with. Admiral 
Yamamoto not only didn’t even know how tarnished it was; he lost his life because of his igno- 
rance a couple of years later. Neither he nor his superiors had the experience and knowledge that 
were necessary to polish up that coin. It took almost ten years for the truth of that dictum 
I formulated for you a moment or two ago to become clear to the Japanese Navy. Had they 
taken quick and full advantage of the unfortunate leakage of the vital COMINT facts soon after 
the Battle of Midway, they could and perhaps would have come to the proper conclusions long 
before they did. Who knows what the results might have been, and the effect thereof, on the 
outcome of the war in the Pacific? 

Hardly anything of importance in the cryptologic battles of World War II escaped the atten- 
tion of Winston Churchill, who even ’way back in 1915, when he was First Sea Lord of the 
British Navy in World War I, had taken a great interest in cryptology. He made the follow- 
ing final comment on the Battle of Midway, a comment that is impressive in its guarded revela- 
tions and in its restraint: 

“One other lesson stands out. The American Intelligence system succeeded in penetrating the 
enemy’s most closely guarded secrets well in advance of events. Thus Admiral Nimitz, sdbeit 
the weaker, was twice able to concentrate all the forces he bad in sufficient strength at the right 
time and place. When the hour struck this proved decisive. The importance of secrecy and 
the consequences of leakage of information are here proclaimed.” 

It wiU probably seem to many of my listeners and readers that I have paid more tributes to 
the achievements of our Navy cryptanalysts in World War II than to those of their Army and 
Air Force opposite numbers. If I have done so, I can only say in extenuation that three factors 
are here involved. First, as regards my apparent overlooking of the contributions of the USAF, 



•• The Hinge of Fate. Vol. IV. Boston: Houghton Mifflin Co., 1950, p. 252-3. 
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I need but remind you that it wasn’t until after the war was all over that the Army Air Corps 
became autonomous; before then the technical achievements of cryptanalysts of that Corps 
were merged with those of the Army. Second, as a member of the Army’s Signal Intelligence 
Service, and then the Army Security Agency during World War II, it is fitting that somebody 
other than I blow the trumpets in celebration of our Army’s cryptanalytic achievements. All 
I will say is that they were as important as those of our Navy, but for various reasons they liave 
not received much publicity, which is just as weU from the point of view of National Security. 
As a matter of fact, the publicity regarding our Navy’s cr3T>tologic successes comes very large- 
ly from former enemy officers and from the various official investigations into the attack on Pearl 
Harbor, and not from any U.S. Navy personnel. Third, there has been very little leakage with 
regard to Army’s cryptanalytic successes except such as can also be traced back to those Pearl 
Harbor investigations. General Eisenhower’s Crusade in Europe has not one word to say on 
the subjects of signal intelligence, cryptanalysis, codes, ciphers, or signal security, etc., although 
he does make a few rather caustic remarks about the failures and errors of his own intelligence 
staff. General Bradley’s book is equally reticent on these subjects but I cannot refrain from 
quoting one rather amusing episode having to do with COMSEC: 

To identify hdls, road junctions, and towns without our giving our plans away in the event 
of an enemy tap on the wire, I had key features numbered on my war map and gave copies of 
those ntunbers to the division commanders. It was a makeshift private code, lax enough to 
cause Dickson [Bradley’s G— 2] to worry over the security of our plans. 

One morning when I called Major General Terry Allen, he referred to an obscure crossroad 
by its number in this private code. 

“Just a minute, Terry,” I said. “I can’t find that number on my map.” 

“Well, listen carefully. Brad,” he said, “The enemy may be listening in. I’ll say the name 
of the place as fast as I can.” 

Dickson overheard this conversation and threw up his hands. “Security wouldn’t be much of 
a problem,” he said, “if only there were fewer generals in the army.” 

General Hap Arnold’s book I’ve mentioned before and have taken one extract from it. 
There are several others I might have used, but they are not too significant in revdations. 
One volume of the history of the U.S. Army in World War II, entitled “The Signal Corps” 
contains a few references to the achievements of the Signal Intelligence Service, but these, too, 
are not very illuminating. In only one book by a former U.S. Army Officer, Col. Robert S. 
Allen, entitled Lucky Forward: The History of Patton’s Third Army,^* do I find a specific refer- 
ence to the help the SIS gave Patton. In tAlli-ng about Patton’s signal officer. Colonel Ham- 
mond, Allen writes: 

“One of his ace units was the SIS. A radio-interception agency, commanded by Major Charles 
Flint, a young, trigger-smart expert, it worked closely with G-2 on a dual mission: maintaining 

a vigilant security check on friendly communications and intercepting enemy messages. The 
unit performed outstandingly in both fidds. 

Its reports plugged up an unwitting leak from a Mechanized Cavalry source, capable of re- 
vealing important troop-movement information to the enemy. And at a critical period in the 
Battle of Bastogne, the unit broke a German coded message that enabled heavy losses to be in- 
flicted upon the redoubtable 5 Para Division. The SIS was particularly fruitful in breakthroughs 
and fluid situations when the enemy was on the run and had to use radio.” 

The foregoing extract is, of course, far from spectacular. Indeed, I imagine that it will 
hardly bring forth more than a polite yawn from many members of an audience that has al- 
ready learned about the sensational revelations made during the various Pearl Harbor investi- 
gations and about those famous letters that General Marshall wrote to Governor Dewey. 
But there remains this much more to be said: the achievements of our Army’s cryptologic 
units both in Washington and in the field, as weU as certain stiU undisclosed top secret suc- 



New York: The Vanguard Press, Inc., 1957, p. 56. The author makes some quite caustic comments 

about the failure of the intelligence staffs to make use of the intelligence they were furnished. They are worth 
reading. 
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cesses of our Navy’s units ashore and afloat, are locked away in archives where they will prob- 
ably remain for a long, long time. More than this I am not at liberty to tell you in this 
lecture. 

With this statement I bring this series to a rather undramatic but I hope meaningful close. 
I will wind it up by paraphrasing the last sentence of the Introduction to that important book 
The Battle of Midway from which I have quoted at some length. The Introduction was written 
by Admiral Nobutake Kondo, the senior living commander of the former Imperial Navy, who 
participated in that battle: I close this series with the hope that my lectures will serve as 
material for criticism and reflection. 



CONFIDENTIAL 



174 



REF ID:A63860 






CONFIDENTIAL 



APPENDIX I 

From Time Magazine, 17 December 1945 



MAGIC WAS THE WORD FOR IT 

U.S. citizens discovered last week that perhaps their most potent secret weapon of World 
War II was not radar, not the VT fuse, not the atom bomb — but a harmless little machine 
which cr 3 rptographers painstakingly constructed in a hidden room at Fort Washington. 

With this machine, bmlt after years of trial and error, of inference and deduction, crypto- 
graphers had duplicated the decoding devices used in Tokyo. Testimony before the Pearl 
Harbor Committee had already shown that the machine — known in Army code as “Magic” — 
was in use long before Dec. 7, 1941, had given ample warning of the Jap’s sneak attack — if 
only U. S. brass hats had been smart enough to realize it (Time Dec. 10). Now General 
Marshall continued the story of “Magic’s” magic. It had: 

Enabled a relatively small U.S. force to intercept a Jap invasion fleet, win a decisive vic- 
tory in the Battle of the Coral Sea, thus saving Australia and New Zealand. 

Given the U.S. full advance information on the size of the Jap forces advancing on Mid- 
way, enabled the Navy to concentrate ships which otherwise might have been 3,000 miles 
away, thus set up an ambush which proved to be the turning-point victory of the Pacific war. 

Directed U.S. submarines unerringly to the sea lanes where Japanese convoys would be 
passing. 

By decoding messages from Japan’s Ambassador Oshima in Berlin, often reporting inter- 
views with Hitler, given our forces invaluable information on German war plans. 

UNEASY SECRET 

So priceless a possession was Magic that the U.S. high command lived in constant fear that 
the Japs would discover the secret, change their code machinery, force U.S. cryptographers to 
start all over again. 

General Marshall had a long series of bad moments after U.S. flyers, showing a suspicious 
amount of foresight, shot down Admiral Yamsunoto’s plane at Bougainville in 1943. Gossip 
rustled through the Pacific and into Washington cocktail parties; General Marshall got to the 
point of asking the FBI to find an officer “who could be made an example of.” (The FBI, 
fearful of looking like a Gestapo, refused.) 

Once a decoder was caught in Boston tr 3 dng to sell the secret. Once, weU-meaning agents 
of the Office of Strategic Services ransacked the Japanese Embassy in Lisbon, whereupon the 
Japs adopted a new code for military attaches. This code remained unbroken more than a 
year later.* The worst scare of aU came during the 1944 presidential campaign, when George 
Marshall heard that Thomas E. Dewey knew i^e secret and might refer to it in speeches (see 
below). 

Yet for all these fears, the Japs never discovered that the U.S. was decoding their messages. 
Even after the surrender the Army still used Magic as a guide to occupation moves: though 
it had once been planned to send a whole army into Korea, Magic showed that a single regi- 
ment would be enough. 

SECRET KEPT 

The letter, on stationery of the Chief of Staff’s Office, bore a bold heading: TOP SECRET. 
FOR MR. DEWEY’S EYES ONLY. Candidate Thomas E. Dewey, his curiosity piqued, 
read rapidly through the first two paragraphs: 

I am writing you without the knowledge of any other person except Admiral King {who concurs) 
because we are approaching a grave dilemma in the political reactions of Congress Hoarding Pearl 
Harbor. 



1 While I have no recollection of the Boston business, I shall never forget the Lisbon incident. — W.F.F. 
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Wkat I have to tell you below is of such a highly secret nature that I feel compelled to ask you 
either to accept it on the basis of your not communicating its contents to any other person and return- 
ing this letter or not reading any further and returning die letter to the bearer. 

Tom Dewey looked up from the typewritten page. As he did, the word cryptograph, a few 
paragraphs below, flashed into his vision like a red traflSc light. He made his decision quickly, 
folded the letter, handed it back. Colonel Carter W. Clarke ^in mufti), who had flown from 
Washington to Tulsa to catch up with Tom Dewey’s campaign, went back, his mission un- 
completed. 

YOU HAVE MY WORD 

It was September 1944. The campaign train rolled up through the Midwest, returned to 
Albany. A few days later, Tom Dewey received another visit from Colonel Clarke.® 

The Colonel, again in civilian clothes, handed over another letter from General Marshall. 
The General had changed his mind somewhat; 

I am quite willing to have you read what comes hereafter with the understanding that you are 
bound not to communicate to any other person any portions on which you do not now have or later 
receive factual knowledge from some other source than myself. . . . You have my word that neither 
the Secretary of War nor the President has any intimation whatsoever that such a letter has been 
addressed to you. . . . 

THE LOCKED FILE 

This time Tom Dewey read on. As he turned tihe pages, he became the first man outside 
the high command to know the full story of “Magic” and what it was accomplishing in the 
war against the Japs (see above). The letter closed with a plea: 

I am presenting this matter to you, for your secret information, in the hope that you will see 
your way clear to avoid the tragic results with which we are now threatened in the present political 
campaign. 

Tom Dewey locked the letter in his files, went back to his electioneering. Though he had 
known before that the U.S. had cracked the Jap code, had suspected that this information 
cast grave doubts on Franklin Roosevelt’s role before Pearl Harbor, he held his tongue. The 
War Department’s most valuable secret was kept out of the campaign. 

MEETING AT A FUNERAL 

Recounting this story at the Pearl Harbor hearing last week. General Marshall recalled that 
he and Tom Dewey had never discussed the matter in person until they met at Franklin Roose- 
velt’s funeral last April: “I asked Mr. Dewey to come with me to the War Department and 
I showed him current Magic showing Japanese movements. His attitude was friendly and 
gracious.” 

Had Marshall ever told Franklin Roosevelt of the letters to Dewey? Said Marshall: “The 
President died without knowing of it.” 

SECRET LOST 

The Pearl Harbor Committee blithely tossed away one still-secret U.S. weapon. George 
Marshall’s letters to Governor Dewey (see above) mentioned that the U.S., with the help of the 
British, had decoded German as well as Japanese messages. George Marshall begged the 
Committee to cut out these references. The Committee refused. 

Publication of the letters thus gave the Germans their first knowledge that their code had 
been broken. It was also a breach of diplomatic confidence with the British, who had let the 
U.S. in on the secret on the understanding that it would be kept. 



' “A few days later . . .” But note that the first letter is dated 25 September 1944, the second, 27 September. 
It is possible that Colonel Clarke was unable to deliver the letter, but my recollection is that he did deliver 
it the very next day. — ^W.F.F. 
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ANATOMY OF CONFUSION 

Up to the witness stand stepped Lieut. General Leonard T. Gerow, chief of the Army’s War 
Plans Division in 1941, to accept fuU blame for one of Pearl Harbor’s most egregious errors. 
On Nov. 27, a sharp warning of impending hostilities had gone out from General Marshall to 
Lieut. General Walter C. Short in Hawaii. On Nov. 28, General Short replied that he had 
ordered an alert against sabotage — which was like saying he had a butterfly net ready for a 
tiger. Yet his reply was never challenged by Washington. Why? 

Explained General Gerow: he thought the Short message was an answer to other communi- 
cations. Said he: “If there is any responsibility in the War Department for failure ... I 
accept that responsibility.’’ 

'Then up stepped General Marshall himself to take part of the blame. He didn’t recall 
seeing the Short message; he should have. “That was my opportunity to intervene and 1 
didn’t take it,” he confessed. “Just why, I do not know.” 

FOURTEEN POINTS 

The week’s testimony also shed light on the warning that came too late — the message Walter 
Short received on Dec. 7 at 2:58 p.m. Hawaiian time informing him that the Japs were on 
the way. 

On the night of Dec. 6, Major General Shuman Miles, Chief of Intelligence, received from 
“Magic” decoders the first thirteen points of the strongly worded, final Jap diplomatic note 
being sent from Tokyo to its envoys in Washington. Next morning, some time between 7 and 
8 o’clock, an assistant telephoned that he had “important” information. General Miles 
reached his office at 9 o’clock. 

General Marshall had risen early, breakfasted at 8, looked over the Sunday papers, gone 
out for a horseback ride. (He usually rode for 50 minutes.) He was in the shower when an 
urgent message arrived by telephone from General Miles’ assistant. He finished his bath, 
dressed quickly and went straight to the War Department. The time: 11:25 a.m. 

WHO’S CONFUSED? 

A hastily gathered staff meeting decided that the Jap note meant war, that a warning should 
go immediately to Hawaii, the Philippines, the West Coast, the Canal. General Marshall 
called Admiral Harold R. (“Betty”) Stark, then Chief of Naval Operations. “Betty” Stark 
thought by some obscure reasoning that further warnings would “only confuse” field comman- 
ders. 

General Marshall wrote out a warning anyway, called Admiral Stark again to read it. Stark 
decided on second thought that the warning might as well go to Navy commanders as well. 
General Marshall sent it on to the Signal Corps which promised, according to General Mfies, 
that it would be delivered in 20 minutes. It was then 11:50 a.m.; the attack was one hour 
and ten minutes away. 

Instead of 20 minutes, the Signal Corps took eight hours and 28 minutes to get the message 
to Short (by commercial cable instead of Army radio). Nobody had bothered to check up 
on the Signal Coips; the General Staff took for granted that the message was going full speed 
ahead. 

Why hadn’t General Marshall used the telephone? His explanation: he knew that many 
phone calls — including transatlantic talks between Franklin Roosevelt and Winston Churchill — 
had been tapped; he feared that the Japs would intercept his call and label it an “overt act.” 
Anyway, he said, even if he had phoned he would first have called the Philippines, where he 
thought the real danger lay. 

Said George Marshall: “We thought Hawaii was the most improbable [target] of all. . . . 
1 was inclined to feel the hazards were too great and they would not risk it.” 
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APPENDIX II 

The Letters from General Marshall to 
Governor Dewey, 25 and 27 September 1944 

The Marshall-Dewey correspondence is so important in cryptologic history that 1 feel that 
the whole of it should be included even in this brief history. When the letter was written, it 
was, of course, TOP SECRET and it was only under great pressure from certain members of 
the Joint Congressional Committee that General Marshall revealed its contents.’ Thus, it 
came into the public domain not only on the very day that General Marshall was forced to 
place it in evidence — ^its publication caused a great sensation in the newspapers — but also when 
the 40 volumes of the Hearings of that Committee were published and put on sale by the 
Superintendent of Documents of the Government Printing Office. The disclosure of the con- 
tents of the Marshall-Dewey correspondence was indeed such a sensation that Life magazine 
printed the whole of it in its issue of 17 December 1945, with the following introduction: 



MARSHALL-DEWEY LETTERS 
General Told Candidate We Had Broken Jap Code 

During the 1944 election campaign General George C. Marshall wrote two letters to Repub- 
lican Candidate Thomas E. Dewey, telling him that Army cryptographers had broken the Jap- 
anese “ultra” code. This fact was first revealed in a story by Life Editor, John Chamberlain, 
which appeared in Life, Sept. 24. Marshall’s purpose, Chamberlain wrote, was to forestall 
Dewey’s revelation of that fact in a possible attack on the Roosevelt administration’s Japanese 
policy before Pearl Harbor. The actual text of the letters remained secret until last week, 
when General Marshall appeared before the Congressional Committee investigating Pearl Har- 
bor and made the letters public. They appear below. 

When he had finished reading the first two paragraphs of the first letter. Governor Dewey 
stopped because, as the Chamberlain article reported, “the letter might possibly contain ma- 
terial which had already come from other sources, and that anyway, a candidate for President 
was in no position to make blind promises.” General Marshall sent the letter back again with 
an introduction which relieved the governor of binding conditions. This time Dewey read the 
letter and after much thought and discussion decided not to make use during the campaign of 
any information he previously had. 



First Letter 



My Dear Governor: 



TOP SECRET 

(FOR MR. DEWEY’S EYES ONLY) 

25 September 1944 



I «m writing you without the knowledge of any other person except Admiral King (who con- 
curs) because we are approaching a grave dilemma in the political reactions of Congress regard- 
ing Pearl Harbor. 

What I have to teU you below is of such a highly secret nature that I fed compelled to ask 
you either to accept it on the basis of your not communicating its contents to any other person and 
returning the letter or not reading any further and returning the letter to the bearer. 

1 should have preferred to talk to you in person but I could not devise a method that would 
not be subject to press and radio reactions as to why the Chief of Staff of the Army would be 
seeking an interview with you at this particular moment. Therefore, I have turned to the meth- 
od of this letter, to be delivered by band to you by Colonel Carter Clarke, who incidentally has 
charge of the most secret documents of the War and Navy Departments. 

In brief, the military dilemma resulting from Congressional political battles of the political 
campaign is this: 



< So far as I am aware it has neither been ascertained nor disclosed, if known, who gave Governor Dewey 
the information. But it is a fact that as a patriotic citizen, he acceded to General Marshall’s request — ^he 
made no use whatever of the vital secret information during the campaigpi or after it. Tim^s account spe- 
cifically states that Dewey “held his tong^ue.” The War Department’s most valuable secret was kept out of 
the campaign.” I know this to be true. — W.F.F. 
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The most vital evidence in the Pearl Harbor matter consists of our intercepts of the Japanese 
diplomatic communications. Over a period of years our cryptograph people analyzed the char- 
acter of the machine the Japanese were using for encoding their diplomatic messages. Based 
on this, a corresponding machine was built by us which deciphers their messages. 

Therefore, we possessed a wealth of information regarding their moves in the Pacific, which 
in turn was furnished the State Department — rather than, as is popularly supposed, the State 
Department providing us with information — but which unfortunately made no reference what- 
ever to intentions toward Hawaii until the last message before Dec. 7, which did not reach our 
hands until the following day, Dec. 8. 

Now the point to the present dilemma is that we have gone ahead with this business of de- 
ciphering their codes until we possess other codes, German as weU as Japanese, but our main 
basis of information regarding Hitler’s intentions in Europe is obtained from Baron Oshima’s 
messaige {lom Berlin reporting his interviews with Hitler and other officials to the Japanese 
Government. These are stiU in the codes involved in the Pearl Harbor events. 

To explain further the critic^ll nature of this setup which would be wiped out almost in an 
instant if the least suspicion were euroused regarding it, the Battle of the Coral Sea was based on 
deciphered messages and therefore our few ships were in the right place at the right time. Fur- 
ther, we were able to concentrate our limited forces to meet their advances on Midway when 
otherwise we almost certainly would have been some 3,000 miles out of place.* 

We had full information of the strength of their forces in that advance and also of the smaller 
force directed against the Aleutians which fimilly landed troops on Attu and Kiska. 

Operations in the Pacific are largely guided by the information we obtain of Japanese deploy- 
ments. We know their strength in various garrisons, the rations and other stores continuing 
available to them and what is of vast importance, we check their fleet movements and the move- 
ments of their convoys. 

The heavy losses reported from time to time which they sustain by reason of our submarine 
action largely results from the fact that we know the sailing dates and the routes of their con- 
voys and can notify our submarines to lie in wait at the proper point. 

The current raids by Admiral Halsey’s carrier forces on Japanese shipping in Manila Bay and 
elsewhere were largdy based in timing on the known movements on Japanese convoys, two of 
which were caught, as anticipated, in his detractive attacks. 

You will understand from the foregoing ihe utter tragic consequences if the present political 
debates regarding Pearl Harbor disclose to the enemy, German or Jap, any suspicion of the vital 
sources of information we now possess. 

The Robert’s report on Pearl Harbor had to have withdrawn from it all reference to this highly 
secret matter, therefore in i>ortions it necessarily appeared incomplete. The same reason which 
dictated that course is even more important today because our sources have been greatly dab- 
orated. 

As a further example of the delicacy of the situation, some of Donovan’s people (the OSS), 
without tdling us, instituted a secret search of the Japanese Embassy offices in Portugal. As a 
result the entire military attache Japanese code all over the world was changed, and though this 
occurred over a year ago, we have not yet been able to break the new code and have thus lost 
this invaluable information source, particularly regarding the European situation. 

A recent speech in Congress by Representative Harness would clearly suggest to the Japanese 
that we have been reading their codes though Mr. Harness and the American public would prob- 
ably not draw any such conclusion. 

The conduct of General Eisenhower’s campaign and of all operations in the Pacific are closdy 
related in conception and timing to the information we secretly obtain through these intercepted 
codes. They contribute greatly to the victory and tremendously to the saving of American 
lives, both in the conduct of current operations and in looking toward the early termination of 
the war. 

I am presenting this matter to you, for your secret information, in the hope that you will see 
yom: way clear to avoid the tragic results with which we are now threatened in the present po- 
litical campaign. I might add that the recent action of Congress in requiring Army and Navy 
investigations for action before certain dates has compelled me to bring back the corps com- 
mander, General Gerow, whose troops are fighting at Trier, to testify here while the Germans 
are counterattacking his forces there. This, however, is a very minor matter compared to the 
loss of our code information.' 



* In regard to this and the succeeding four paragraphs, see my comment bdow (p. 122). 

' The last two sentences in this paragraph were omitted from the Second Letter. See footnote'. 



179 



CONFIDENTIAL 



T 



CONFIDENTIAL 



REF ID : A63860 



Please return this letter by bearer, 
should you so desire. 



I will hold it in my secret file subject to your reference 



Faithfully yours, 
G. C. Marshall 



Second Letter 



TOP SECRET 



(FOR MR. DEWEY’S EYES ONLY) 



27 September 1944 

My Dear Governor: 

Colond Clarke, my messenger to you of yesterday. Sept. 26, has reported the result of his de- 
livery of my letter dated Sept. 25. As I understand him you (A) were unwilling to commit 
yourself to any agreement regarding “not communicating its contents to any other person’’ in 
view of the fact that you felt you already knew certain of the things probably already referred 
to in the letter, as suggested to you by seeing the word “cryptograph,” and (B) you could not 
feel that such a letter as this to a Presidential candidate could have been addressed to you by 
an ofiEicer in my position without the knowledge of the President. 

As to (A) above I am quite willing to have you read what comes hereafter with the under- 
standing that you are bound not to communicate to any other person any portions on which you 
do not now have or later receive factual knowledge from some other source than myself. As to 
(B) above you have my word that neither the Secretary of War nor the President has any inti- 
mation whatsoever that such a letter has been addressed to you or that the preparation or send- 
ing of such a communication was being considered. 

I assure you that the only persona who saw or know of the existence of either this letter or my 
letter to you dated Sept. 25 are Admiral King, seven key officers responsible for security of mil- 
itary communications, and my secretary who typed these letters. 

I am trying my best to make plain to you that this letter is being addressed to you soldy on 
my initiative. Admiral King having been consulted only after the letter was drafted, and I am 
persisting in the matter because the military hazards involved are so serious that I feel some 
action is necessary to protect the interests of our armed forces. 

{The second letter then repeated substantially the text of the first letter except for the first two para- 
graphs). 

Life failed to note that the last two sentences in the penultimate paragraph of the “First 
Letter’’ were omitted from that paragraph in the “Second Letter,” but there is no explanation 
for the omission.^ Perhaps it was simply for the sake of brevity, but this seems improbable. 

In my first lecture I called attention to the fact that the account given in the Time artide 
gives credit to Army cryptanalysts for providing the secret communication intelligence “which 
enabled our Navy to win such spectacular battles as those of the Coral Sea and Midway, and 
to waylay Japanese convoys,” whereas the credit for the communication intelligence which 
enabled our Navy to win these battles was produced by Navy cryptanalysts. One cannot 
blame the editors of Time for making such a bad error because the source of the error can be 
traced directly to General Marshall’s letter itself. Several years ago I ad^ed my friend Colonel 
Clarke, who, you will recall, carried General Marshall’s letter to Governor Dewey, how such 
an error had crept into General Marshall’s letter and was told that the letter which had been 
prepared for General Marshall’s signature did not meet with the General’s wholehearted ap- 
proval and that the General himself had modified it. Perhaps that is how the error to which 
I have referred crept into it. One could hardly expect General Marshall to be entirely famil- 
iar with the technical cryptanalytic details involved in what he wanted to tell Governor Dewey, 
nor should one criticize him for not being able, in his very busy dajrs and under very heavy 
pressure of events, to bear in mind or even to know about the differences between the enemy 
systems worked upon by the respective and separate Army and Navy cryptanalytic organiza- 
tions. It is of course possible, indeed it may be, that in the cases of certain important naval 
operations valuable COMINT came from messages read by Army cryptanalysts, and this may 



* The sentence beginning “I might add . . .” and the one beginning “This, however is . . .” were omitted. 
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be what confused General Marshall in impljdng that all the credit belonged to them because 
of their solution of the Japanese highest-level diplomatic crs>ptosystems, the one that used the 
so called “Purple Code,” which wasn’t a “code” but a cipher machine. 

Since the period during which the disclosures of the Joint Congressional Investigation were 
made, disdosiues which were disastrous so far as the important accomplishments of the two 
services, before and after the Pearl Harbor attack, in the field of communications intelligence, 
much has been written and is now in the public domain regarding those accomplishments, 
but fortunately no technical details of significance have been disclosed. 
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